App Review VoodooAI Efficacy Test

[TheMalwareMaster]

 

[TheMalwareMaster]

This one should be a test of just VoodooAI disconnected from VirusTotal

 

[brod56]

This one should be a test of just VoodooAI disconnected from VirusTotal

Yeah it is. Amazing result as expected.

 

[hamo]

Wow, Amazing!

You disconnect virustotal from setting, ONLY depend on Voodoo AI.
Nice test thank you & thanks Voodooshield.

 

[Arequire]

Extremely good result. Thumbs up for VoodooAI.

 

[BugCode]

Wooow! Lenght 1h 22mn... Thanks dude for the video! Dan IS THE MAN!

 

[frogboy]

VoodooShield sure is a good product, it sure did well. Thanks for sharing this video here.

 

[XhenEd]

VoodooAI is great, but it has some false positive detections.

I have VoodooShield Free on my other laptop, by the way.

 

[shmu26]

VoodooAI is great, but it has some false positive detections.

I have VoodooShield Free on my other laptop, by the way.

It definitely has a good share of FPs.

 

[Winter Soldier]

Great video, well, machine learning is simple to explain: you take some samples, you extract the patterns that characterize them and you use them to predict about new samples.

Yes, it is simple to explain but far less simple to achieve

 

[Fonda Bellamy]

Amazing results, I do like it.

 

[AtlBo]

Thanks for the vid. VS performed well again.

So many signed malwares. I know the creator can sign them no problem, but I like that VS states what was found in the signature. The pictured alert bothers me though. VS says the signature is valid but then what is the problem? Is the problem who signed or the program is verified? Someone who is in a hurry could see that the sig is verified and allow it as a FP. For me alerts is where we could see the most progress with security, including VS...

 

[shmu26]

Thanks for the vid. VS performed well again.

So many signed malwares. I know the creator can sign them no problem, but I like that VS states what was found in the signature. The pictured alert bothers me though. VS says the signature is valid but then what is the problem? Is the problem who signed or the program is verified? Someone who is in a hurry could see that the sig is verified and allow it as a FP. For me alerts is where we could see the most progress with security, including VS...

That is definitely an interesting alert you are showing in that screenshot. The user's confusion should be solved by the VS recommended action. In this case, it is quarantine.

 

[AtlBo]

That is definitely an interesting alert you are showing in that screenshot. The user's confusion should be solved by the VS recommended action. In this case, it is quarantine.

True in the balance @shmu26.

In the context of FPs and in the heat of the moment when someone is busy I wonder if the user will see the fine print. The recommendation is very small type. Also, it seems like something or some kind of dynamic is missing to me. VS does appear to be getting better overall in large increments with each passing year, I will say that.

Experienced users who aren't knowledgeable users (office employees when at home on their own computer or on their laptop, etc.) seem a concern with this type of alert, and I do still feel it could be improved for them. This is a general feeling for me more than pointed at this alert however. So many malwares are designed to deceive.

Wonder what the corporate world would be like if all corps deployed default deny set to auto-quarantine detections. Crazy thought that seems like it would be very effective at protecting networks in place with other security. I guess this is gaining wider traction?

 

[shmu26]

True in the balance @shmu26.

In the context of FPs and in the heat of the moment when someone is busy I wonder if the user will see the fine print. The recommendation is very small type. Also, it seems like something or some kind of dynamic is missing to me. VS does appear to be getting better overall in large increments with each passing year, I will say that.

Experienced users who aren't knowledgeable users (office employees when at home on their own computer or on their laptop, etc.) seem a concern with this type of alert, and I do still feel it could be improved for them. This is a general feeling for me more than pointed at this alert however. So many malwares are designed to deceive.

Wonder what the corporate world would be like if all corps deployed default deny set to auto-quarantine detections. Crazy thought that seems like it would be very effective at protecting networks in place with other security. I guess this is gaining wider traction?

You have good insights, and I would suggest sharing them on the voodooshield thread over at wilders
VoodooShield ?
If you post there, Dan the dev will get your feedback. He often responds to posters, too.

 

[AtlBo]

Thanks @shmu26. Good idea to check in at Wilder's more than I have been. Don't know what I could contribute that Dan couldn't do better in time, but it couldn't hurt to try with 2 cents sometimes.