همايش ملی پيشرفت های معماری سازمانی

صفحه اصلی / نهمین همایش پیشرفت‌های معماری سازمانی ایران

Digital Transformation in Network Security: Transitioning from Antivirus to Endpoint Detection and Response

نویسندگان :

Mahdi Seyfipoor¹ Mohammad Mahdi Eskandari²

1- دانشگاه تهران 2- دانشگاه تهران

کلمات کلیدی :

digital transformation،Endpoint Detection and Response (EDR)،Antivirus (AV)،cybersecurity،Hybrid security،threat detection،extended detection and response (XDR)

چکیده :

The digital transformation of cybersecurity has driven a paradigm shift from traditional antivirus (AV) solutions to intelligent endpoint detection and response (EDR) systems. This paper analyzes this evolution and evaluates several AV and EDR products under controlled conditions across eight malware categories. The results show that while AV systems are effective against typical file-based malware, they fail to detect advanced, fileless attacks. In contrast, EDR solutions enhanced with behavioral analytics and machine learning provide better threat detection but incur higher computational overhead. To address this problem, a Collaborative Hybrid EDR Integration Strategy (CHEIS) is proposed that combines lightweight AV protection for standard endpoints with advanced EDR monitoring for critical assets. Future work will extend this study towards extended detection and response (XDR), integrating endpoint, network, and cloud telemetry for adaptive defense in evolving digital infrastructures.