Because __________ software can block suspicious software in real-time, it has an advantage over such established anti-virus detection techniques as fingerprinting or heuristics.
Rather than using a list of viruses as a reference to determine whether a device contains malware, heuristic virus detection spots viruses by identifying files with suspicious behavior or code infrastructure and flagging them as potentially dangerous.