» Navigation |
|
|
|
» Links |
|
» Online Users: 504 |
| 53 пользователей и 451 гостей |
| aintrust, amedelefat, AndreyKa, Bratez, Colombor, CyberHelper, Erammaretuemn, EugeneF, floniq, Gesserok, hober, миднайт, Infernal_lightning, Мурат, JIEXA, Kuzz, Ladans, lanimret, LiveFree, login, Martion, Max_Kursk, nanyac, Neo-473, Суббота, noob, Nori, Сэм, nyu-nyu, PavelA, pig, pka23, polar_owl, polword, realymad, rodin, safetyinfo, Sandor, sems, Sinn, Skudnev, stasura, Surfer, Tox78, TpaxyH, Vasily utkin, vdiev, viktor395, VV2006, wlad, XiTri, Yzik |
| Рекорд одновременного пребывания 1,192, это было 18.01.2010 в 18:03. |
|
» Testing |
About the testing of anti-viruses for the level of detection of malicious software performed by VirusInfo
(by Nick Golovko)
Since 2005 VirusInfo performs the testing of anti-virus software. Any member of the project's forum can participate in it. The results of this testing are regularly processed and represented as a graph. This graph demonstrates the comparison of anti-virus software by several parameters.
The data presented by VirusInfo are widely used by specialists of various companies dealing with informational security, in order to compare and rate the anti-virus software. Now the latest graph is always available for any visitor of our site.
How we test
The testing of anti-viruses by VirusInfo is powered by free online scanner VirusTotal. Project participants, being practising specialists in the area of computer security, are uploading at VirusTotal the malicious software that they have received from infected machines, and then publish the results of scanning in a special topic on VirusInfo forum. The malicious software should meet the following requirements:
1) The sample should not be detected by the anti-virus software that protects the infected machine.
2) The sample should be found by the consultant him/herself in a real infection case.
3) The sample should not be taken from some other site or from some other collection of malware.
The results of scanning are regularly generalized as a graph of detection level. The graph is prepared in accord with the following principles:
1) The X axis represents the anti-virus software used by VirusTotal at the current moment. The Y axis represents the number of samples uploaded.
2) For each antivirus we mark the number of samples that it has successfully detected using one or another detection method. The graph reflects the general number of detected samples and the each method's part in the general detection.
3) The following detection methods are distinguished:
a) signature detection (detecting already known malware by the signature method)
b) heuristic detection (detecting yet unknown malware by the method of emulation / code analysis / etc. Examples: "Heur.Trojan.Generic"; "a variant of: XXXXX")
c) detection of suspicious file (detecting yet unknown malware by the method of informing the user about suspicious characteristics of a sample under analysis. Examples: "Suspicious file"; "VIPRE: Suspicious")
d) detection of suspicious cryptor / packer (detecting yet unknown malware by the method of informing the user about the unknown / rare / suspicious packer / cryptor or about the fact of multiple packing / crypting. Example: "HEUR/Crypted").
Testing results
The latest one is the graph for October and November, 2009, presented below.
Comments on how we test and how to understand the results
The material for testing is collected irregularly and voluntarily. VirusInfo publishes a new graph every two months. The testing should not be regarded as the one that completely reflects the detection abilities of anti-virus software, but at the same time the data received are of certain value when comparing antiviruses in a complex way, taking into consideration the results of several independent tests.
Additional info
Materials for testing are collected in the special Russian section "Testing" of VirusInfo forum. In that section the forum members can access the earlier graphs.
You may discuss the results of testing in English here.
Licensing
Copyright (c) VirusInfo.
All rights reserved.
Using the materials of this article without mentioning the source is prohibited.
Statistics is collected and processed by Shu_b
|
|
» Testing: Previous month |
Older graphs are available to the registered users in the thread of anti-virus testing.
|
|
Часовой пояс GMT +3, время: 16:24.
Page generated in 0.11704 seconds with 8 queries |
