Analyzing Malware Detection Efficiency with Multiple Anti-Malware Programs (2012 paper)

MrBrian · Nov 7, 2014

From hxxp://www.profsandhu.com/confrnc/misconf/ase12-malware.pdf :

Commercial anti-malware programs have become mainstream security products and are widely deployed. In practice, perhaps due to economic factors, users may only deploy a single anti-malware program. It has been proven that there is no universally effective anti-malware program, which effectively bases malware defense on the implicit assumption that at least the popular anti-malware programs can provide sufficient security. This assumption has been neither justified nor examined in a systematic fashion. In this paper, we propose a methodological framework for examining this assumption. We define an anti-malware program to be competent when it detects and cleans all malware present on a system. Our initial experiments demonstrate that a single anti-malware program is not sufficient. It is challenging to figure out how many anti-malware programs are needed in order to achieve competence in the majority of malware scenarios, although our experimental results can serve as a good starting point toward ultimately answering the question.
Click to expand...

Log in or Sign up

Analyzing Malware Detection Efficiency with Multiple Anti-Malware Programs (2012 paper)

MrBrian Registered Member

Log in or Sign up

Analyzing Malware Detection Efficiency with Multiple Anti-Malware Programs (2012 paper)

MrBrian Registered Member

Useful Searches