The peculiarity of corporate cyber security is the usage of attack prevention security tools. Corporations apply three major tools for protecting computers against application-based attacks. They are: antivirus programs, virus prevention systems and application control. When application-based attacks are applied for using the network during the attack, the application attack prevention tools give a high level protection. For instance, the Sasser worm can infect the service and find weak points in the Microsoft Local Security Authority Subsystem Service. After that, the Sasser worm's load is sent to the system and is run automatically without the user notification. When the system is infected, an executable program transfers the data by scanning network for weak points in the Microsoft Local Security Authority Subsystem Service.

Antivirus tool for protecting computers against the application-based threats is one of the best antivirus technologies applied by a corporation. This antivirus tool reduces the level of a threat at the first stage of the attack's cycle. In spite of the multiple modifications, this technology has its drawbacks which result in frequent outbreaks. For instance, after the Netsky appearance vendors had to elaborate a virus signature for the programs in a daytime. In order to stay defended from the outbreak it was necessary to test it via network. Nevertheless, the second version of Netsky proved that all systems were apt to infection.

Signature-based antivirus programs are working for detecting and preventing the well-known viruses, worms and even Trojans. Such an antivirus program can do nothing with the viruses today, thus, after the updating it will prevent the danger and delete the worm. For instance, a slight change in a well-known virus can prevent the virus from deletion by an antivirus system. Antivirus programs stay effective against well-known viruses; however, they cannot prevent attacks against unknown types of viruses. In this case ‘the computer requires additional protection tools to stop network threats'.

Virus prevention system is a supplement to traditional antivirus systems that detects and blocks worms and viruses before the execution. The execution conduct is the major focus of the system. The virus prevention system finds and prevents the whole blocks of viruses. Moreover, the virus prevention system can be run without any updates. The system does not require a signature for every virus or worm. It analyzes the activities within files finding entire families of felonious code using the code actions and tools. The virus prevention system recognizes the techniques used for creating a virus and thus, detects it. For instance, a healthy code doesn't self-replicate. If the system recognizes a technique for replication, it will be able to stop the attack.