The cost of dealing with false positive malware alerts

Discussion in 'other anti-malware software' started by ronjor, Jan 16, 2015.

  1. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,154
    Location:
    Texas
  2. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    14,885
    Location:
    Slovenia, EU
    Yes FPs can be real PITA to deal with. That's one of the reasons I don't use real-time AV any more.
     
  3. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    14,885
    Location:
    Slovenia, EU
  4. Mayahana

    Mayahana Banned

    Joined:
    Sep 13, 2014
    Posts:
    2,220
    This isn't about consumers, it really doesn't cost anything for a desktop user to get a FP. Nobody really cares of Joe-Bob in Chicago gets an FP on his Dell Notebook..

    The real issue is when FP's start being dished out to corporations, then IT has to be dispatched to resolve it, and the costs can run into the thousands, sometimes into the 5 figure range PER HOUR to deal with a FP hit on multiple systems/servers. (factoring costs well beyond what the IT firm charges as this impacts business operations) Most consumers don't understand the gravity of this. It's also why MSP's and IT firms cannot, and should not deploy anything without a long vetting period, lab testing, and extensive vendor meets. Simply installing an adblocker on corporate desktops can leave to outrageous issues that can cause millions of dollars in lost business. A good example is today Fortinet pushed a signature update to a particular appliance line that started breaking crucial websites. I responded in 'minutes' but by them thousands of dollars were lost, not including the our company charges to deal with it. It's serious business.

    One of the reasons MSE is one of the most deployed business solutions is because it never breaks anything (regardless of the lackluster protection). Most larger companies have a very very short list of what they can deploy - safely. When folks say 'why don't they deploy this' or 'run that lockdown', or 'install cookie and adblockers'.. Well - now you know why - it's a recipe for a major disaster.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.