The lab of AV-TEST examined protection packages in the Advanced Threat Protection test, a type of live-attack test. Each product in the test was required to withstand 10 sophisticated attacks with scripts, macros and ransomware, precisely resembling the threat scenario posed by hackers. In doing so, each defensive step was evaluated according to the pattern of the MITRE ATT&CK Matrix. The test shows that many products are true system defenders – whereas others are not.
Classical security tests demonstrate how well security packages offer protection against ten thousands of Trojans, viruses etc. But what happens when a new variant of malware attacks? Will it be detected, blocked and deleted? Can its execution be totally prevented, or are there perhaps individual files encrypted in the end, as is the case with ransomware, for example? Answers to these questions are found in the latest lab test by AV-TEST, in which each protection package was required to fend off 10 real attack scenarios with ransomware. In order for every reader to relate to the test, all the single steps of an attack per product are spelled out in special MITRE ATT&CK Matrix charts.
In the latest test, 9 well-known consumer security packages faced off to see how well they offered protection in 10 real-life scenarios against ransomware. The protection packages came from Bitdefender, BullGuard, G DATA, Malwarebytes, Microsoft, NortonLifeLock, PC Matic, Protected.net and VIPRE Security.
www.av-test.org
