Which virus detection method involves verifying file integrity to detect unauthorized changes?

Which virus detection method involves verifying file integrity to detect unauthorized changes?

• A. Scanning
• B. Interception
• C. Integrity Checking
• D. Heuristic Analysis

Answer: (C)

Verifying file integrity to detect unauthorized changes relies on maintaining trusted baselines of cryptographic hashes (checksums) for important files. By computing a current hash and comparing it to the stored baseline, you can immediately detect any modification, addition, or deletion of a monitored file. This approach catches tampering even when the attacker uses new, unknown malware since the change alters the file’s contents rather than triggering a known signature. It’s common to implement with file integrity monitors that periodically recheck and alert or roll back any mismatches. In contrast, scanning looks for known malware signatures, interception blocks or inspects traffic in real time, and heuristic analysis assesses suspect behavior or anomalous activity rather than exact file changes. The integrity-checking method is the right fit for detecting unauthorized edits to files by verifying that their contents remain as they should be.

Verifying file integrity to detect unauthorized changes relies on maintaining trusted baselines of cryptographic hashes (checksums) for important files. By computing a current hash and comparing it to the stored baseline, you can immediately detect any modification, addition, or deletion of a monitored file. This approach catches tampering even when the attacker uses new, unknown malware since the change alters the file’s contents rather than triggering a known signature. It’s common to implement with file integrity monitors that periodically recheck and alert or roll back any mismatches.

In contrast, scanning looks for known malware signatures, interception blocks or inspects traffic in real time, and heuristic analysis assesses suspect behavior or anomalous activity rather than exact file changes. The integrity-checking method is the right fit for detecting unauthorized edits to files by verifying that their contents remain as they should be.