Next Generation Antivirus
Next Generation Antivirus (NGAV) is endpoint protection that identifies threats from behaviour, machine learning and cloud reputation rather than relying on signatures of files already known to be malicious.
What is Next Generation Antivirus?
Definition
Next Generation Antivirus (NGAV) is endpoint protection that decides what to block from behaviour, machine learning and cloud reputation, rather than from a signature list of files already known to be malicious. It exists because signatures stopped being sufficient: fileless techniques leave no file to match, and re-packing a payload defeats a hash. In cybersecurity terms NGAV is the prevention layer while EDR adds recording and investigation on top — most current endpoint products ship both, and the distinction survives mainly in how they are licensed and compared.
Role in cybersecurity
Next Generation Antivirus plays an important role in building organizational resilience against cyber threats. Implementing appropriate mechanisms in this area is required by regulations such as NIS2, DORA and ISO 27001.