AVLab.pl Product of the year 2022: a summary of security tests by AVLab

[Adrian Ścibor]

Dear Readers!

We have just published a summary of the Advanced In The Wild Malware Test from the entire year 2022. We have awarded products - a special certificate for very good results. This is contingent on two points:

1. Participation in all editions of the Advance In The Wild Malware Test.
2. Block all samples in every edition of the test.

Finally, the "Product of the Year 2022" award goes to Avast, CatchPulse, Emsisoft, Xcitium (Comodo).

Full report in PDF: https://avlab.pl/en/wp-content/uplo...summary-by-avlab-cybersecurity-foundation.pdf

Website: Product Of The Year 2022: Summary Of Security Tests » AVLab Cybersecurity Foundation

By the way: we are working on feedback from the January 2023 round of testing, which we added a new feature to compare: a Remediation Time -> that is a TOTAL Time from download malware in the browser, through execution and detection at the end (quarantinned, behaviour blocked, cloud resposne, etc.).

And the second: we are gonna to publish a report from EDR-XDR test as visibility of red-teaming attacks in telemetry. Please, be patient!

Regards, Adrian

 

[Shadowra]

F-Secure

 

[Dave Russo]

The "Product of the Year 2022" award goes to​

Avast, CatchPulse, Emsisoft, Xcitium​

were the winners, This term post launch launch where many of these venders" shined" is new to me. Can anyone explain this being ok? Other AVs PRE-LAUNCH Bitdefender, ESET,F-Secure, Kaspersky, Avira,G-Data had excellent scores keeping malware from ever getting on a system(This doesn't seem better for the Test)??? Also is Xcitium (comodo enterprise)?

 

[Arequire]

The "Product of the Year 2022" award goes to​

Avast, CatchPulse, Emsisoft, Xcitium​

were the winners, This term post launch launch where many of these venders" shined" is new to me. Can anyone explain this being ok? Other AVs PRE-LAUNCH Bitdefender, ESET,F-Secure, Kaspersky, Avira,G-Data had excellent scores keeping malware from ever getting on a system(This doesn't seem better for the Test)??? Also is Xcitium (comodo enterprise)?

Bitdefender, ESET, F-Secure, Kaspersky and G-Data didn't participate in all test editions, so were ineligible for the award. Avira failed to block all samples so was also ineligible.

 

[Adrian Ścibor]

@Arequire That is correct.

Mentioned software has been awarded in 2022 and the score gained 100% and Excellent certificate as well. That is not enough to get Product of The Year according to award's methodology.

 

[ErzCrz]

The "Product of the Year 2022" award goes to​

Avast, CatchPulse, Emsisoft, Xcitium​

were the winners, This term post launch launch where many of these venders" shined" is new to me. Can anyone explain this being ok? Other AVs PRE-LAUNCH Bitdefender, ESET,F-Secure, Kaspersky, Avira,G-Data had excellent scores keeping malware from ever getting on a system(This doesn't seem better for the Test)??? Also is Xcitium (comodo enterprise)?

From here: 19th Edition Of Protection Test Against Malicious Software » AVLab Cybersecurity Foundation

After suggestion from our community, we have changed naming of the protection levels since the last edition of the test. Now there are two levels of protection:

Level 1 and 2 are combined into a single level: Pre-launch

Level 3 remains the same with a new name: Post-launch

Reclassification of levels is for marketing purposes to simplify the methodology and make it easier to understand the tests that users have suggested. Thank you!

So the new classification concerns detecting malware samples:

• before they are launched in the system (Pre-launch)
• and those blocked after launch (Post-launch). This is the most dangerous situation, but our experience shows that such cases require tests in the field.

Oh and yeah, Comodo and Xcitium are one in the same. Recent post on their forum from Melih (Comodo Founder) said updates are planned with a roadmap expected soon.

 

[Dave Russo]

CatchPlus and Emisoft both use Windows Firewall So whatever firewall

---

Any program has, doesn't have anything to do with protecting from malware in these tests? and does the (firewalls) matter what you have,? I know I am kind of an idiot, but would someone shed some knowledge on this Thanks

 

[outlawxtorn]

I happen to think you're intelligent!

 

[Adrian Ścibor]

CatchPlus and Emisoft both use Windows Firewall So whatever firewall

---

Any program has, doesn't have anything to do with protecting from malware in these tests? and does the (firewalls) matter what you have,? I know I am kind of an idiot, but would someone shed some knowledge on this Thanks

Cases where a firewall blocks a malicious connection are rare and are not identified separately. Yes, we see them on the test backend, and they are counted as POST-Launch: in order for the firewall to react according to the AV setting, you have to run the sample, so it is POST level.