Sophos

Sophos blogs

HIPS runtime behavior analysis

These analyses describe two behaviors that Sophos Anti-Virus, version 7.0's runtime behavior analysis detects. These two behaviors could each be indicative of active malware. They are:

  1. buffer overflow
  2. suspicious behavior (which take the prefix 'HIPS/')

Buffer overflow

Find out more about buffer overflow.

Suspicious behavior