Reply to thread

Message

<blockquote data-quote="Deleted Member 308817310" data-source="post: 823364" data-attributes="member: 80647">There is no such thing as a &quot;proven&quot; behavior blocker. Any behavior blocker is destined to eventually fail if you put it up against enough samples. It&#039;s a hit and miss every single time you run a sample. The only thing you&#039;re going to find when asking for a &quot;proven&quot; behavior blocker is a &quot;he said&quot; and &quot;she said&quot; game. One word against someone else&#039;s. What is the point of that and how is it productive? It&#039;s not.It&#039;s all fun and games when you&#039;re running samples the AV KNOWS is unknown/new or untrusted on its cloud network but what happens when an exploit is used and a safe, genuine and common program is abused for malicious purposes?I&#039;m just saying, it doesn&#039;t take a genius to get a high detection ratio with unknown malware when the attack chain in the test is limited to just running samples which are relatively new, untrusted on the cloud network. There&#039;s more effective testing methodologies out there to really learn the strengths and weaknesses of a particular product, but you&#039;ve got to be willing to learn and spend the time to do the necessary work.</blockquote>

[QUOTE="Deleted Member 308817310, post: 823364, member: 80647"] There is no such thing as a "proven" behavior blocker. Any behavior blocker is destined to eventually fail if you put it up against enough samples. It's a hit and miss every single time you run a sample. The only thing you're going to find when asking for a "proven" behavior blocker is a "he said" and "she said" game. One word against someone else's. What is the point of that and how is it productive? It's not. It's all fun and games when you're running samples the AV KNOWS is unknown/new or untrusted on its cloud network but what happens when an exploit is used and a safe, genuine and common program is abused for malicious purposes? I'm just saying, it doesn't take a genius to get a high detection ratio with unknown malware when the attack chain in the test is limited to just running samples which are relatively new, untrusted on the cloud network. There's more effective testing methodologies out there to really learn the strengths and weaknesses of a particular product, but you've got to be willing to learn and spend the time to do the necessary work. [/QUOTE]

Verification