User guide

W EB T R A F F I C P R O T E C T I O N
59
IN THIS SECTION:
Component operation algorithm ...................................................................................................................................... 59
Changing HTTP traffic security level ............................................................................................................................... 60
Changing actions to be performed on detected objects................................................................................................... 60
Creating a protection scope ............................................................................................................................................. 60
Selecting the scan type ................................................................................................................................................... 61
Kaspersky URL advisor ................................................................................................................................................... 62
Using heuristic analysis ................................................................................................................................................... 63
Scan optimization ............................................................................................................................................................ 63
Restoring default web protection settings ........................................................................................................................ 63
COMPONENT OPERATION ALGORITHM
Web Anti-Virus protects your computer against data coming onto the computer via HTTP, and prevents hazardous scripts
from running on the computer.
This section discusses the component's operation in more detail. HTTP traffic is protected using the following algorithm:
1. Each web page or file that is accessed by the user, or by a program via the HTTP protocol, is intercepted and
analyzed for malicious code by Web Anti-Virus. Malicious objects are detected using both Kaspersky Anti-Virus
databases and the heuristic algorithm. The database contains descriptions of all the malicious programs known
to date and methods for neutralizing them. The heuristic algorithm can detect new viruses that have not yet
been entered in the database.
2. After the analysis, you have the following available courses of action:
If a web page or an object accessed by the user contains malicious code, access to them is blocked. A
notification is displayed that the object or page being requested is infected.
If the file or web page does not contain malicious code, the program immediately grants the user access to
it.
Scripts are scanned according to the following algorithm:
1. Each script run on a web page is intercepted by Web Anti-Virus and is analyzed for malicious code.
2. If the script contains malicious code, Web Anti-Virus blocks it and informs the user of it with a special pop-up
message.
3. If no malicious code is discovered in the script, it is run.
Scripts are intercepted only on the web pages, opened in Microsoft Internet Explorer.