App Review Trend Micro Maximum Security 2024

It is advised to take all reviews with a grain of salt. In extreme cases some reviews use dramatization for entertainment purposes.
Content created by
Shadowra

Kiss

Level 4
Verified
Well-known
Oct 6, 2021
174
And a little bit more about Trend Micro model.
It uses minimalistic pattern file (40 MB) and is more similar to the signature-less products.
The local pattern determines files which are confirmed safe and suspicious (which will be subjected to check using the full malware pattern available on TM servers).

According to the modules description above and what I will post below, Trend Micro reserves patterns (definitions) only for malware that actively causes damage. Once it no longer causes damage, it will be removed from the local pattern file as it has to stay small. This is one of the reasons that can cause the high number of undetected samples on the AVC malware protection test, yet TM nails the real world protection. Files no longer causing damage will only be detected by Predictive Machine Learning once it’s been retrained with these samples, behavioural blocking (eventually) and not by anything else (they will be a miss). Such files will most probably be bots, RATs and infostealers with dead C&Cs (ransomware can always cause damage).

Trend Micro uses Advanced Threat Scan Engine which is fully cloud-based to scan files without a good reputation.
ATSE can block malware and identify the malware family (which can make it look like it’s definitions-based).

Detect emerging threats using Predictive Machine Learning​

Use Predictive Machine Learning to detect unknown or low-prevalence malware. (For more information, see Predictive Machine Learning.)

Predictive Machine Learning uses the Advanced Threat Scan Engine (ATSE) to extract file features and sends the report to the Predictive Machine Learning engine on the Trend Micro Smart Protection Network. To enable Predictive Machine Learning, perform the following:

  1. Ensure Internet connectivity
  2. Enable Predictive Machine Learning
As with all detected malware, Predictive Machine Learning logs an event when it detects malware. (See About Deep Security event logging.) You can also create an exception for any false positives. (See Create anti-malware exceptions.)

Ensure Internet connectivity​

Predictive Machine Learning requires access to the Global Census Service, Good File Reputation Service, and Predictive Machine Learning Service. These services are hosted in the Trend Micro Smart Protection Network. If your Deep Security Agents or Virtual Appliance cannot access the Internet directly, see Configure agents that have no internet access for workarounds.

Predictive Machine Learning Parent topic

Trend Micro Predictive Machine Learning uses advanced machine learning technology to correlate threat information and perform in-depth file analysis to detect emerging unknown security risks through digital DNA fingerprinting, API mapping, and other file features. Predictive Machine Learning also performs a behavioral analysis on unknown or low-prevalence processes to determine if an emerging or unknown threat is attempting to infect your network.
Predictive Machine Learning is a powerful tool that helps protect your environment from unidentified threats and zero-day attacks.
After detecting an unknown or low-prevalence file, Deep Discovery Web Inspector scans the file using the Advanced Threat Scan Engine (ATSE) to extract file features and sends the report to the Predictive Machine Learning engine, hosted on the Trend Micro Smart Protection Network. Through use of malware modeling, Predictive Machine Learning compares the sample to the malware model, assigns a probability score, and determines the probable malware type that the file contains.
Depending on how you configure your policies, Deep Discovery Web Inspector can block the object to prevent the threat from continuing to spread across your network. Alternatively, you can configure the policy to monitor and log information about the object without blocking it.

Smart Protection Network integration is available for your computers and workloads through Anti-Malware and Web Reputation modules. Smart Feedback, which is set at the system level, allows you to provide continuous feedback to the Smart Protection Network.

For more about Trend Micro's Smart Protection Network, see Smart Protection Network.

If you are operating in a FedRAMP (Federal Risk and Authorization Management Program) environment, you cannot use Smart Feedback. If you have already enabled Smart Feedback, you must disable it.

In this topic:

See also Smart Protection Server documentationfor instructions on manually deploying the server.

Anti-Malware and Smart Protection​

Benefits of Smart Scan​

Smart Scan provides the following features and benefits:

  • Provides fast, real-time security status lookup capabilities in the cloud.
  • Reduces the overall time it takes to deliver protection against emerging threats.
  • Reduces network bandwidth consumed during pattern updates. The bulk of pattern definition updates only needs to be delivered to the cloud, not to many endpoints.
  • Reduces the cost and overhead associated with corporate-wide pattern deployments.

Enable Smart Scan​

Smart Scan is available in the Anti-Malware module. It leverages Trend Micro's Smart Protection Network to allow local pattern files to be small and reduces the size and number of updates required by agents and Appliances. When Smart Scan is enabled, the agent downloads a small version of the much larger full malware pattern from a Smart Protection Server. This smaller pattern can quickly identify files as either confirmed safe or possibly dangerous. Possibly dangerous files are compared against the larger complete pattern files stored on Trend Micro Smart Protection Servers to determine with certainty whether they pose a danger or not.

Without Smart Scan enabled, your relay agents must download the full malware pattern from a Smart Protection Server to be used locally on the agent. The pattern is only updated as scheduled security updates are processed. The pattern is typically updated once per day for your agents to download and is around 120 MB.

Verify that the computer can reliably connect to the global Trend Micro Smart Protection Network URLs (see Port numbers for a list of URLs). If connectivity is blocked by a firewall, proxy, or AWS security group or if the connection is unreliable, it reduces Anti-Malware performance.


Can Trend Micro currently be considered better than Norton?
 
  • Like
Reactions: Sorrento

Klettern

Level 1
Verified
Jun 26, 2018
22
PC World also think Express VPN is the best VPN - I wonder why?? :eek:
:D
It's nonsense checking those affiliate websites on what "the best vpn" is. What I've been doing for a while is just scroling through Reddit. They have decent posts where users perform a legit analysis of the best VPNs and compare them accordingly.
As you can see, Express ain't even #1 in this one... Makes sense why after the Kape bought them over.
 

roger_m

Level 42
Verified
Top Poster
Content Creator
Dec 4, 2014
3,163
It's nonsense checking those affiliate websites on what "the best vpn" is. What I've been doing for a while is just scroling through Reddit. They have decent posts where users perform a legit analysis of the best VPNs and compare them accordingly.
As you can see, Express ain't even #1 in this one... Makes sense why after the Kape bought them over.
In my experience ExpressVPN is decent. It's one of the few VPNs which Reddit doesn't block when browsing the site without being signed into a account and I consistently get good speeds. The number 5 VPN in your Reddit link is CyberGhost, which is also owned by Kape. However, even though they own several VPNs, each VPN has their own servers.
 

Game Of Thrones

Level 6
Verified
Well-known
Jun 5, 2014
287
in recent tests of av-comparative Trendmicro is at the end of the table! but as our trident said it seems they delete the detection of old malware that are not working so they get low scores in tests like the av-comparative malware protection test.

in the real world, they are top 3 sometimes even number 1. We recently tested some security software to transition from Kaspersky to a new suit, and guess what came first? trend micro. their cloud is really powerful and actually, they have a really good remediation system, when it detects malware it does a really good job of cleaning it. not just a simple detect and delete.

recent versions are light, have good web protection, and have a good on-access cloud scan, so even if the malware comes from USB it detects it really well as soon as it sees it.
I believe they are not good at advertising for home users (they don't care because they are a corporate/enterprises first company)

their machine learning is top 3 in terms of sophistication. in recent months they seem to have reduced their false positives too.we are going to change some of our systems to Trendmicro.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top