Reply to thread

Message

<blockquote data-quote="ForgottenSeer 89360" data-source="post: 914024">I created a piece of malware myself tonight to check this amazing 0-day performance many of them have, only Kaspersky is good enough to block it. They should approve the thread tomorrow.Malware piece 1:[SPOILER][ATTACH=full]249043[/ATTACH][/SPOILER]Malware piece 2:[SPOILER][ATTACH=full]249045[/ATTACH][/SPOILER]My test proves few points:Nobody can score 100% on 0-daysMachine Learning, as much as it’s smart is also stupid. Human-writen generic detections based on math-models are far more potent than automated algorithmsAnd last, but not least, Kaspersky has the best engine around.In the above case, Kaspersky has develeoped an algorithm that’s able to detect the “gibberish” language that occurs once I obruscated few lines of PowerShell code. Everybody else, including Microsoft Defender with their long and complicated stories about machine learning and how they blocked threats before others, failed.</blockquote>

[QUOTE="ForgottenSeer 89360, post: 914024"] I created a piece of malware myself tonight to check this amazing 0-day performance many of them have, only Kaspersky is good enough to block it. They should approve the thread tomorrow. Malware piece 1: [SPOILER][ATTACH type="full" alt="ADCF8ED8-1420-4BF0-90A7-C6908B5CB3C8.png"]249043[/ATTACH][/SPOILER] Malware piece 2: [SPOILER][ATTACH type="full" alt="BE092C99-2FB0-4D73-B7BD-B867B4FAAD26.png"]249045[/ATTACH][/SPOILER] My test proves few points: Nobody can score 100% on 0-days Machine Learning, as much as it’s smart is also stupid. Human-writen generic detections based on math-models are far more potent than automated algorithms And last, but not least, Kaspersky has the best engine around. In the above case, Kaspersky has develeoped an algorithm that’s able to detect the “gibberish” language that occurs once I obruscated few lines of PowerShell code. Everybody else, including Microsoft Defender with their long and complicated stories about machine learning and how they blocked threats before others, failed. [/QUOTE]

Verification