A utility is available to generate the ClamAV signature database based on the Google Safe Browsing API

The developers of the free antivirus package ClamAV decided to issue with providing a signature database based on a Google-distributed collection Safe Browsing, which contains information about phishing and malware sites.

Previously, the Safe Browsing-based signature database was provided by ClamAV developers, but in November last year, its update was discontinued due to restrictions imposed by Google. In particular, Safe Browsing's terms of use were limited to non-commercial use only, and a separate API was required for commercial purposes. Google Web Risk. Since ClamAV is a free product that cannot separate users and is also used in commercial solutions, signature generation based on Safe Browsing has been discontinued.

To solve the problem with filtering links to phishing and malicious sites, a utility has now been prepared clamav-safebrowsing (clamsb), which allows users to independently generate a signature database for ClamAV in GDB format based on their account in the service Safe Browsing and keep it in sync. The code is written in Python and is licensed under GPLv2.

Source: opennet.ru

Add a comment