Reply to thread

Message

<blockquote data-quote="Lenny_Fox" data-source="post: 850242" data-attributes="member: 82776">A friend of mine , who studies IT-security &amp; penetration testing, was allowed to have a peek in the kitchen of AV_comparatives. My friend has seen with his own eyes that AV-comparatives collected zero day samples 24x7. The check to confirm whether a sample is really malware takes 5 to 30 minutes, so most of AV-comparatives samples are zero hour.&nbsp; Most testing agencies disable smart screen (otherwise even less malware is able to execute).The test conducted by experienced members on this forum are &#039;shoot in the foot&#039; testing (executing&nbsp; malware on your harddisk), while AV-Test and AV-comparatives perform real world testing (simulating clicking on a link in the browser). The high succes rate of the AV-products tested has nothing to do with the age of the malware samples collected by the testing organizations (as often claimed on security forums). Most malware has a hard time gaining high integrity level rights when triggered from a link on a fully patched Windows 10 PC.Windows Defender set to HIGH or MAX with Configure defender (try to pass smartscreen, WD cloud block at first sight and block executables from running unless they meet a certain age and prevalence of trust criteria) will even perform better against web based attack vectors.</blockquote>

[QUOTE="Lenny_Fox, post: 850242, member: 82776"] A friend of mine , who studies IT-security & penetration testing, was allowed to have a peek in the kitchen of AV_comparatives. My friend has seen with his own eyes that AV-comparatives collected zero day samples 24x7. The check to confirm whether a sample is really malware takes 5 to 30 minutes, so most of AV-comparatives samples are zero hour. Most testing agencies disable smart screen (otherwise even less malware is able to execute). The test conducted by experienced members on this forum are 'shoot in the foot' testing (executing malware on your harddisk), while AV-Test and AV-comparatives perform real world testing (simulating clicking on a link in the browser). The high succes rate of the AV-products tested has nothing to do with the age of the malware samples collected by the testing organizations (as often claimed on security forums). Most malware has a hard time gaining high integrity level rights when triggered from a link on a fully patched Windows 10 PC. Windows Defender set to HIGH or MAX with Configure defender (try to pass smartscreen, WD cloud block at first sight and block executables from running unless they meet a certain age and prevalence of trust criteria) will even perform better against web based attack vectors. [/QUOTE]

Verification