Reply to thread

Message

<blockquote data-quote="Anthony Qian" data-source="post: 984344" data-attributes="member: 91446">Yes. LiveGuard is a cloud-based sandbox that combines machine learning and behavior analysis engines in multiple layers. Sounds great right? However, in my testing, LiveGuard missed a number of threats which is detected by other trusted vendors and later detected by ESET after manual analysis. After reading the reports of EDTD (=LiveGuard, LiveGuard doesn&#039;t provide reports though), I found that those missed samples were marked as &quot;Clean&quot; by the machine learning layer and were not processed by the behavior analysis engines that followed the machine learning engine. Also, the detection threshold of LiveGuard is set to high, possibly due to false positive control for home products.CyberCapture from Avast isn&#039;t a cloud-based sandbox. It&#039;s a local dynamic heuristic sandbox that will send suspicious samples to the cloud if the local dynamic engine cannot make a decision.</blockquote>

[QUOTE="Anthony Qian, post: 984344, member: 91446"] Yes. LiveGuard is a cloud-based sandbox that combines machine learning and behavior analysis engines in multiple layers. Sounds great right? However, in my testing, LiveGuard missed a number of threats which is detected by other trusted vendors and later detected by ESET after manual analysis. After reading the reports of EDTD (=LiveGuard, LiveGuard doesn't provide reports though), I found that those missed samples were marked as "Clean" by the machine learning layer and were not processed by the behavior analysis engines that followed the machine learning engine. Also, the detection threshold of LiveGuard is set to high, possibly due to false positive control for home products. CyberCapture from Avast isn't a cloud-based sandbox. It's a local dynamic heuristic sandbox that will send suspicious samples to the cloud if the local dynamic engine cannot make a decision. [/QUOTE]

Verification