Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 825033" data-attributes="member: 32260">This is a research thread so I am still trying to find some independent (faithful) sources which could say something about &quot;Behavior Blockers&quot;. Here is the fragment from the AV-Comparatives report:&quot;The scope of protection offered by antivirus programs is extended by the inclusion of e.g. URL-blockers, content filtering, cloud reputation systems, ML-based static and dynamic detections and user-friendly behavior-blockers. If these features are perfectly coordinated with the signature-based and heuristic detection, the protection provided against threats increases.&quot;[URL unfurl=&quot;true&quot;]https://www.av-comparatives.org/tests/real-world-protection-test-july-november-2018/[/URL]Everyone on MT will probably agree that dynamic detections depend on behavior monitoring/blocking (the malware is blocked after detection). So again, &#039;Behavior Blocker&#039; (BB) can do only a part of behavior blocking on the host machine. Many behavior blocks will come from other AV modules which can dynamically detect malicious behavior.</blockquote>

[QUOTE="Andy Ful, post: 825033, member: 32260"] This is a research thread so I am still trying to find some independent (faithful) sources which could say something about "Behavior Blockers". Here is the fragment from the AV-Comparatives report: [I]"The scope of protection offered by antivirus programs is extended by the inclusion of e.g. URL-blockers, content filtering, cloud reputation systems, ML-based static and dynamic detections and user-friendly behavior-blockers. If these features are perfectly coordinated with the signature-based and heuristic detection, the protection provided against threats increases."[/I] [URL unfurl="true"]https://www.av-comparatives.org/tests/real-world-protection-test-july-november-2018/[/URL] Everyone on MT will probably agree that dynamic detections depend on behavior monitoring/blocking (the malware is blocked after detection). So again, 'Behavior Blocker' (BB) can do only a part of behavior blocking on the host machine. Many behavior blocks will come from other AV modules which can dynamically detect malicious behavior. [/QUOTE]

Verification