PC Security Labs: Exploit Mitigations Test 2014 August

[FleischmannTV]

Test has been commissioned by Malwarebytes.

Full report:

-http://pcsl.r.worldssl.net/report/exploit/rce_mitigations_201408_en_malwarebytes.pdf

 

[Ink]

Why wasn't Malwarebytes Anti-Exploit Free included in the test?

http://malwaretips.com/threads/would-you-buy-malwarebytes-anti-exploit-premium.28869/

 

[Aura]

Why wasn't Malwarebytes Anti-Exploit Free included in the test?

View attachment 17588
http://malwaretips.com/threads/would-you-buy-malwarebytes-anti-exploit-premium.28869/

Because I guess it wouldn't perform as well, and also, except for the EMET 4.1, all of these products are paid if I remember correctly, so they would be on the same "level".

 

[FleischmannTV]

The main problem I have with this test is that was done on Windows XP.

 

[Koroke San]

No Emsisoft Anti-Malware?

 

[Aura]

The main problem I have with this test is that was done on Windows XP.

I guess they did that because there's more exploits under XP than 7, 8 and 8.1. But it wouldn't be really representative of today's reality as most exploits under XP are known, while under 7, 8 a

 

[RmG152]

Not 7 or 8.1 and not x64. I skip this test.

 

[Anupam]

where is my hero 360 TS? too scared to include?

 

[Malware1]

No Emsisoft Anti-Malware?

Does it have any exploit protection?

 

[Koroke San]

Does it have any exploit protection?

Why not? it's exploit protection is not mature but it's BB can detect exploits.
http://support.emsisoft.com/topic/13886-exploits/

 

[Kate_L]

is it me or someone tries to make us buy the pro version

 

[woodrowbone]

Is this Malwarebytes answer to HitmanPro Alert 3, and its exploit test tool were I think Malwarebytes AntiExploit (Free) did not do that well?
Time for a neutral test of exploits against these 2?

/W

 

[RmG152]

Response from surfright

With disbelief we took notion of this comparative test. I will not go into details but we filed a complaint and insist on removal of our beta software from their report. Because even though this report states that they downloaded the software from the official website, our software is not even released or on our website. That is because our software is still in development, attesting the preview builds that we only post here on Wilders Security. Our preview builds only includes functionality that we would like to have tested. Our software clearly states Preview and the release notes state that it is not for production environments.
In addition, the test was not done carefully. For example, PCSL did not add the standalone QuickTime Player to Alert's Exploit Mitigations while testing CVE-2012-0663, which the tester did not forgot while testing EMET.

Since we did not ask PCSL to include our experimental software nor gave them permission to put it up against production software, we can only belief that their client insisted on including it for no other reason than slander.

 

[Thingol]

Wow, strong response from the HMP.A guys. If it's true it's really poor testing methodology.

I really like the Loman brothers and their excellent software. I also have a lot of time for Pbust. I like the fact that they're both trying to fill a gap the main vendors seem to want to avoid.

I don't get the whole single specific specialised AE software vs generic product approach though. It's not very real-world for me. After all in the real world many of the AV/suites would have blocked the threat by other protection features. I much prefer - run exploit, is it succesful in blocking payload - end of story, but understand it's a very specific protection area they want to highlight and if the test is to be believed a vulnerable one for the 'big-boys'.

Put MBAE up against it's competitors (HMP.A, the better HIPS, AppGuard and a few others) in a real world scenario where the exploit is delivered from a malicious site, document etc rather than manufactured then I'd be very interested in the results.

As it is, nah.............

Cheers

Chris

 

[LABView707]

MBAE works flawlessly. The free version is just fine cause all you really need is browser protection. Uninstall Java. Do not use Microsoft Office or Adobe Reader and your all set.

I have tried EMET on several pc's. Always the same issues. The GUI is slow to open and to respond. The pc seems to slow down. It cannot be easily used by the average user. I can tell some to try MBAE and all they need to do is install it. Set it and forget it. Top notch.