Which Antivirus Products Are Best at Protecting Themselves?

Status
Not open for further replies.

Ali80

Level 5
Thread author
Verified
Nov 13, 2014
218
You depend on your antivirus or security suite to protect your data and your devices, but how well does it protect itself? Security software is just software, and subject to flaws, like any other type of program. Coders can take some simple steps to make sure a software flaw doesn't open the program to exploit attack. However, the latest report from German lab AV-Test Institute shows a wide range in how well security vendors armor their products against direct attack.

Use of DEP and ASLR in Consumer Antivirus Software in 32-bit and 64-bit files http://www.pcmag.com/image_popup/0,1740,iid=440222,00.asp
 
Last edited:

Ali80

Level 5
Thread author
Verified
Nov 13, 2014
218
No man ... Arnold Schwarzenegger is judge and jury and he decides to not involve his country made products :)
!CEnI,g!BWk~$(KGrHqYOKpME0UnDvv+)BNS,r20uww~~_35.JPG
 
Last edited:

Atlas147

Level 30
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Jul 28, 2014
1,990
Does it mean that if either DEP or ASLR are 100% that the programme is 100% protected? Or can certain exploits work if either is not 100%? Sorry learning something new everyday :oops:
 
  • Like
Reactions: Ali80

jamescv7

Level 85
Verified
Honorary Member
Mar 15, 2011
13,070
Does it mean that if either DEP or ASLR are 100% that the programme is 100% protected? Or can certain exploits work if either is not 100%? :oops:

Self protection may become vulnerable at any chances even its totally strong because, there are newly exploit that design to find hole that isn't fully patch.
 
  • Like
Reactions: Ali80 and frogboy
R

rkkdjb

what about webroot ?
anyone familiar with it will know its strong right from installation to stopping it to safe mode.
any views ?
 
  • Like
Reactions: Ali80

Ali80

Level 5
Thread author
Verified
Nov 13, 2014
218
100% means that product itself completely implement DEP and ASLR techniques for selfprotection against exploits. If DEP is exploitable (and it is) product is also exploitable, if exploit can bypass ASLR (and it can) it can bypass product selfprotection. Simply 100% means that product is more secure than that with 50%...but we don't know does these AV-s use some other techniques for selfprotection (this test does not show it). This is relevant only (and only) when exploit is targeted to attack some particular AV (today's practice shows that exploits are mainly directed against Java, Flash and PDF-s mostly). For example eSCAN is like Swiss cheese according to this test (ASLR and especially DEP are essential techniques for defense against these targeted attacks.
 
Last edited:
  • Like
Reactions: frogboy

Ali80

Level 5
Thread author
Verified
Nov 13, 2014
218
what about webroot ?
anyone familiar with it will know its strong right from installation to stopping it to safe mode.
any views ?

Webroot is one of the rare products that i never tested :( Sorry @rkkdjb but I'm sure that there is a lot of MT users that can help you ;)
 
  • Like
Reactions: frogboy and rkkdjb
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top