Detection Signature

Noun · Security & Infosec

Definitions

  1. A recognizable pattern such as bytes, strings, protocol features, or behavior markers used to identify known malicious activity. Detection signatures are efficient for known threats but can miss new variants that change their observable fingerprints.

    In plain English: A known pattern security tools use to recognize specific threats.

    Example: "The malware family slipped past the old detection signature after the operators recompiled it with different strings."

Related Terms