Visualizza messaggio singolo
Vecchio 27-07-2011, 02.06.27   #1
retalv
Forum supporter
WT Expert
 
L'avatar di retalv
 
Registrato: 13-03-2005
Loc.: Ultima stella a destra
Messaggi: 2.809
retalv è un gioiello raroretalv è un gioiello raroretalv è un gioiello raroretalv è un gioiello raro
AV Comparative: si arrampicano ai muri lisci?

Questa notte mi è caduto l'occhio su questo invece che sul cuscino...

----------------------------------------------------
Retrospective/Proactive Test May 2011 - Page 4
----------------------------------------------------
This test does not include some vendor's products who decided to do not be included in this "proac-
tive/retrospective" test, eg because in their opinion their product's real-life capabilities are not ade-
quately represented in the retrospective test due to the absence of a live Internet connection or be-
cause URL blocking is not considered. The methodology and design of our "proactive/retrospective"
testing indeed does not allow cloud-based products to connect to their remote knowledge bases and
we also do not consider URL blocking, as this is not what we want to measure/compare in this type of
test. Several other included products also have cloud-based technologies (and some don't), but at the
same time they still provide good offline generic/heuristic detections, without having to rely on /
sent data to their clouds, without having many false alarms and without being dependent of the mal-
ware vector (ie without relying on blacklists of URL filters). Cloud and other technologies should be
seen as an additional protection enhancement, but not as a replacement of basic technologies.

Some further (unofficial) reasons given by some vendors for not taking part in the test are mostly
related to marketing issues, eg that they usually score lower than some of their main competitors in
this type of tests. Another reason was that they may had many FPs in February and therefore they
would get lower awards also in the retrospective test or also because they simply do not want that
users see tests where percentages are low and not close to 100%. Some of the vendors which are not
taking part this time expressed that they are going to participate again in retrospective tests probably
next year. Although the given technical and marketing reasons may make sense, users should have
the right to know how products score in various aspects and various test scenarios; as long as the
users are informed/educated about what the results are showing, they will be able to understand by
themselves to what extend the data is useful for their needs, and if it is not of interest for them, the
users will look at results provided in other types of tests provided by AV-Comparatives, like eg the
Whole-Product-Dynamic test, which aims to simulate a real-world scenario which takes into account
various protection features of the products.

Nowadays, hardly any Anti-Virus products rely purely on “simple” signatures anymore. They all use
complex generic signatures, heuristics etc. in order to catch new malware, without needing to
download signatures or initiate manual analysis of new threats. In addition, Anti-Virus vendors con-
tinue to deliver signatures and updates to fill the gaps where proactive mechanisms initially fail to
detect some threats. Anti-Virus software uses various technologies to protect a PC. The combination
of such multi-layered protection usually provides good protection.



Peccato che nella seguente affermino che....


-------------------------------------------------
On-Demand Comparative February 2011 - Page 4
-------------------------------------------------
Information about used additional third-party engines/signatures inside the products: eScan , F-Secure and
Qihoo 360 are based on the Bitdefender engine. G DATA is based on the Avast and Bitdefender engines. PC
Tools is using the signatures of Symantec. Trustport is based on the AVG and Bitdefender engines. Webroot is
based on the Sophos engine.

Quindi parte dei produttori che hanno detto "no, grazie" sono presenti con altri prodotti che utilizzano gli stessi motori e/o firme di chi se ne è andato.

Alias: il problema cloud sembra reggere solo in parte, quello della rilevazione offline ancora meno... sarà forse dovuto (...più che altro...) al "peso" dato da AV Comparative ai vari parametri presi in considerazione?

Voi cosa ne pensate?
___________________________________

L'uomo ha attraversato un'evoluzione complessa, dal DOS a Windows 7.
Poi ... tutto è vago.

Ultima modifica di retalv : 27-07-2011 alle ore 02.20.29
retalv non è collegato   Rispondi citando