Expanding on cloud-delivered protection
Cloud protection, cloud-delivered protection, cloud-based protection—different ways to describe the same concept: leveraging the power of the cloud to perform analysis on signals at very high speed. This approach provides multiple benefits:
- Always up-to-date detection logic
- Extreme scale and breadth of signal, allowing for detection of net-new malware, which, especially with polymorphism, is extremely common
- Reduced reliance on device performance
- Opportunity for further analysis through detonation
- A chance to prevent patient zero by utilizing BAFS
Cloud-delivered protection has been available in earlier forms since the start of the Microsoft Active Protection Service (MAPS).
The inverse pyramid in Figure 2.1 shows how the interaction between client and cloud can very quickly identify and block even polymorphic, never-seen-before malware, with new protections created typically within (milli)seconds and...
