Using behavior stream signatures (BSS)

To configure the use of behavior stream signatures via Kaspersky Security Center:

  1. Open Kaspersky Security Center Administration Console.
  2. In the Managed devices folder of the console tree, open the folder with the name of the administration group to which the relevant protected virtual machines belong.
  3. In the workspace, select the Policies tab.
  4. Select a Light Agent for Windows policy in the list of policies and open the Properties: <Policy name> by double-clicking.
  5. In the Light Agent for Windows policy properties window, select the System Watcher section in the list on the left.

    In the right part of the window, the System Watcher component's settings are displayed.

  6. In the Proactive Defense section, select the Use behavior stream signatures (BSS) check box.
  7. Select the required action from the On detecting malware activity list:
    • Select action automatically. If this item is selected, on detecting malicious activity Kaspersky Security performs the default action that is specified by Kaspersky Lab specialists.

      This action is set by default.

    • Terminate the malicious program. If this item is selected, on detecting malicious activity Kaspersky Security terminates this application.
    • Skip. If this item is selected, on detecting malicious activity Kaspersky Security does not take any action on the executable file of this application.
  8. Click the Apply button.

To configure the use of behavior stream signatures in the local interface:

  1. On the protected virtual machine, open the application settings window.
  2. In the left part of the window, in the Anti-Virus protection section, select System Watcher.

    In the right part of the window, the System Watcher component's settings are displayed.

  3. Complete steps 6-7 of the previous instructions.

    If the settings in the local interface are not available, this means that the values of settings defined by the policy are used for all protected virtual machines of the administration group.

  4. To save changes, click the Save button.
Page top