AV-TEST Advanced Threat Prevention Test Results

Yeah test it yourself is the best way before believing any of the hype or the fanboys.

Regards Eck

 

I don't see too many of those here. Unless there are any Dell employees lurking.

oh ya, I have a question. Since more malware are targeting legit sites, how doe s a URL filter or black list protect against that?

 

@boredog have you thought out this?

First and foremost, it is a way around being penalized as a false positive. AV software when finding "real" PUP/PUA's, will alert the user if they want to delete the software. And, that only applies if the user specifically enabled PUP/PUA detection. By definition, PUP and PUA's are not considered malicious but rather undesirable nuisance software.

 

Let's make it a polite response. What an interesting statement about AV-testing capabilities and infrastructure.

Do you have any factual data which proofs these remarkable insights?

 

I know this was posted before but to some it doesn't seem to sink in. Dells used it's own security team to evaluate, test other venders and made their decision based on that.

http://www.dell.com/learn/us/en/uscorp1/press-releases/2015-11-17-dell-and-cylance-collaborate

I can't really test it since I need 100 posts over at MT to get access to malware and I just don't go over there much.

I did read the test methods AV-Test used and the only one that had false positives was Cylance and that was two. There is even a newer version then what they used in the tests.

I am fully aware of what a false positive and a PUP are.

 

https://www.nsslabs.com/caws-threat-protection-platform/overview/

https://www.nsslabs.com/security-test/overview/

 

One thing is sure. From now on Cylance will be more known among consumers, which is, I believe, their main goal.

Only time will tell how av-test will end up down the road, after the storm on this test has passed.

 

I sure hope some posting actually read the report. Turning off URL filtering simulated someone coming back from vacation to an outdated computer and a few other sceneries. Yes a real world situation. I for one would not want to have to rely on URL filtering but I do have it in Adguard.
Anyway just ,like that last Cylance thread it always only goes one way so no point in me posting on this one anymore.. I have better thread to watch such as , what is your security setup these days.

 

I've checked their report and must say that they tested really unusual situations:
Test case 1 - users mange to infect system before AV gets updated. IMO not likely, usually AV is first that gets updated right after login or system startup.
Test case 2 - new executable introduced to system in offline mode. IMO in most cases new executables are introduced in online mode (through email or web).
Test case 3 - URL filtering disabled. Regular users usually don't disable this protection.
Test case 4 - only test where Cylance didn't excel and only test where results are not graphically presented
I don't really care much for tests but this tests seem not realistic to me.

 

One thing is for sure, Cylance knows how to generate publicity for itself.

I was privately informed that NSS Labs indeed did recently test Cylance: https://www.cylance.com/en_us/blog/nss-labs-names-cylance-as-a-leader.html . With Cylance promptly finding issue with that report:

Which promptly resulted in a lawsuit being filed by one of the comparative vendors: https://www.crowdstrike.com/blog/cr...tion-illegally-obtain-access-falcon-software/ .

Which was promptly dismissed by the court: https://www.nsslabs.com/blog/company/aep-public-test-announcement/

 

I just mean`t fanboys in general and hype, Cylance in particular.Didn`t PCmatic do something similar a while back i.e.commision a closed test ?

I think it`s a good approach though by Cylance not to rely on the cloud to cover it`s ass.

Regards Eck

 

https://www.av-comparatives.org/pcmatic-pcpitstop-2016/

The big difference here is AV-C used their standard methodology.

 

itman

even though I respect you things change. I was for a very long time someone that did not like change but at my old age, it don't bother me anymore. I learn the new world from my grand and great grandkids these days soon to have my third great grand kid.

with all these new AI companies coming into play, change is required. Did you read my thread on the New kid on the block ? Endgame?
https://www.wilderssecurity.com/thr...earning-engine-featured-in-virustotal.392035/

the file detected was a program just posted here the other day.

 

Perhaps you missed this posting of mine? https://www.wilderssecurity.com/threads/rocket-ai-and-the-next-generation-of-av-software.391971/

 

Yes and I just read Elon Musk's latest statement on AI yesterday, saying humans need to mate with AI or become obsolete to the machines. In other words he said our brain in the future will have to be tied to AI in some way. SKYNET?
he mentioned it is going to happen fast. mentioned how many drivers will be without jobs even though he is developing driverless cars. said we need to think about new professions for all those that will loose their jobs.
as for me I don't care I am retired now. that is why I am spending way to much time here on this forum.

 

You can say that again... They have cheesy advertising as well IMO.

 

I see what you mean, so Cylance got the "full-on" version ?

Interesting that in the PCmatic test that one of the participants was System Mechanic(a main competitor) which scored 0 in the FP test whilst PCmatic topped it.

Well done,I`ve manged to get one grandson and he`s a barrel of monkeys on his own.

So two greatgrandkids and one on the way is a fine achievement indeedy.

Regards Eck

 

So what? That is just a story, nothing concrete, second how does that compare to others, facts please

 

Don't know quite what you mean.

AV-Test and Cylance jointly developed a new methodology to test Cylance. Appears that one was acceptable to Cylance.

The same joint activity occurred with NSS Labs but appears NSS Labs made final changes it felt were necessary and appropriate and that is what Cylance is gripping about.

 

Okay got it, I just thought that the PCmatic test was a limited version i.e. the amount of samples used.

No excuse now for wall-flower Webroot not to" trip the light fantastic".

Regards Eck

 

To end the conversation, it is my personal opinion they offer the most advanced testing facilities. I based that primarily on the organizations that utilize their services and the advanced commercial security devices they test.

 

OK, thx for your answer

 

On that regard, most Wilders members are not old enough to remember this; perhaps you are.

In the 1950's, Walt Disney made the prediction on his weekly TV show that cars would be capable of flight in the near future among many other "futuristic" developments that never materialized.