Reply to thread

Message

<blockquote data-quote="Game Of Thrones" data-source="post: 1099878" data-attributes="member: 23430">the modules in current antiviruses are mostly connected, there is no such thing as behavior block testing because the real-time shield in most antiviruses feeds some data to behavior blockers. this is why you see no more behavioral blocking tests these days because it&#039;s not real-world and scientific, there were times when antiviruses were weak and could be bypassed even by a low-level hacker but today it&#039;s not like that, with the addition of new programming and technologies especially the CLOUD to the arsenal of security companies they can now see any new file and its behavior in their end and with machine learning and human analysis they can stop a newly created malware. before these new techs, malware writers could test their malware easily on different suits and tune their malware, but now it&#039;s much harder, the apps send metadata and nearly all the info about the sample to the cloud making malware detected easily even with heavy modification some companies can detect that malware again. of course I&#039;m not talking about some incidents or ways that these programs can be bypassed, but in general in recent years they protect a normal user even if the user is somehow a happy clicker.so that&#039;s why you see no professional IT people test a security program by disabling its protection layers, they test with samples called zero days which are harder to detect but if you find some zero days you see that security apps can detect and defend the users, sometimes easily and sometimes with their last line of defense (cloud, behavior blocker), the 99 percent detection was a lie but with today&#039;s technology it can be a reality. the cloud(machine learning) was like finding what fire is and how to create it for mankind but for security companies.</blockquote>

[QUOTE="Game Of Thrones, post: 1099878, member: 23430"] the modules in current antiviruses are mostly connected, there is no such thing as behavior block testing because the real-time shield in most antiviruses feeds some data to behavior blockers. this is why you see no more behavioral blocking tests these days because it's not real-world and scientific, there were times when antiviruses were weak and could be bypassed even by a low-level hacker but today it's not like that, with the addition of new programming and technologies especially the CLOUD to the arsenal of security companies they can now see any new file and its behavior in their end and with machine learning and human analysis they can stop a newly created malware. before these new techs, malware writers could test their malware easily on different suits and tune their malware, but now it's much harder, the apps send metadata and nearly all the info about the sample to the cloud making malware detected easily even with heavy modification some companies can detect that malware again. of course I'm not talking about some incidents or ways that these programs can be bypassed, but in general in recent years they protect a normal user even if the user is somehow a happy clicker. so that's why you see no professional IT people test a security program by disabling its protection layers, they test with samples called zero days which are harder to detect but if you find some zero days you see that security apps can detect and defend the users, sometimes easily and sometimes with their last line of defense (cloud, behavior blocker), the 99 percent detection was a lie but with today's technology it can be a reality. the cloud(machine learning) was like finding what fire is and how to create it for mankind but for security companies. [/QUOTE]

Verification