Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 815455" data-attributes="member: 32260">It is a kind of real world test (efficacy assesstments):&quot;When conducting these tests, we tried to simulate normal user behaviour. We are aware that a “Real World” test cannot be conducted by a team of professionals inside a lab because we understand how certain types of malware work, how malware attacks and how such attacks could be prevented. Simulating normal user behaviour means that we paid special attention to all alerts given by security applications. A pass was given only when alerts were straightforward and clearly suggested that malicious action should be blocked.&quot; ...&quot;Although there is no absolute definition of this kind of testing, loosely speaking, it involves the introduction of malware to an endpoint through a realistic vector, such as a browser or USB memory stick. Real World testing mostly involves “dynamic testing” (i.e. the malware is executed and then the ability of the security product to block the malware is measured). &quot;All tests were performed on Windows 10 (malware + PUA, performance), except the exploit test which was performed on Windows 7. It is a strange move because Windows Defender on Windows 7 is not the same product (much weaker) as compared to Windows Defender on Windows 10.</blockquote>

[QUOTE="Andy Ful, post: 815455, member: 32260"] It is a kind of real world test (efficacy assesstments): [I]"When conducting these tests, we tried to simulate normal user behaviour. We are aware that a “Real World” test cannot be conducted by a team of professionals inside a lab because we understand how certain types of malware work, how malware attacks and how such attacks could be prevented. Simulating normal user behaviour means that we paid special attention to all alerts given by security applications. A pass was given only when alerts were straightforward and clearly suggested that malicious action should be blocked." ... "Although there is no absolute definition of this kind of testing, loosely speaking, it involves the introduction of malware to an endpoint through a realistic vector, such as a browser or USB memory stick. Real World testing mostly involves “dynamic testing” (i.e. the malware is executed and then the ability of the security product to block the malware is measured). "[/I] All tests were performed on Windows 10 (malware + PUA, performance), except the exploit test which was performed on Windows 7. It is a strange move because Windows Defender on Windows 7 is not the same product (much weaker) as compared to Windows Defender on Windows 10. [/QUOTE]

Verification