Advice Request Which Android AV Has The Best Signatures?

Please provide comments and solutions that are helpful to the author of this topic.

Which Android AV Has The Best Signatures

  • Bitdefender

    Votes: 8 22.9%

  • Avast

    Votes: 2 5.7%

  • Sophos

    Votes: 2 5.7%

  • Avira

    Votes: 1 2.9%

  • Kaspersky

    Votes: 9 25.7%

  • ESET

    Votes: 3 8.6%

  • Other (Please Specify)

    Votes: 10 28.6%
  • Total voters
    35
HarborFront said:
I use IntelliAV. ML with no signatures
Click to expand...
This is the first I've heard of it. I just installed it on my phone and it looks interesting. It crashed before completing the first scan. But, I ran another scan, which completed, when I reopened the app.
 
  • Like
Reactions: Deletedmessiah
roger_m said:
This is the first I've heard of it. I just installed it on my phone and it looks interesting. It crashed before completing the first scan. But, I ran another scan, which completed, when I reopened the app.
Click to expand...
the dev was commenting here on the latest malware test (avc or avtest not sure) about how they haven't changed anything since last year and still scored well
 
  • Like
Reactions: roger_m
Last edited:
  • Like
Reactions: Evjl's Rain and harlan4096
Signature-based AVs might fail to detect obfuscated APK samples.
Many APK malware are obfuscated and use anti-debugging techniques.
Such protections not only prevent code inspection/modification, but also uninstall the application if such debugging is detected.

Again, sometimes every single string is encrypted with a custom algorithm, basically every reference to a string is replaced by a long array of integers.

You get the best detection by using static and dynamic analysis techniques and as said above, static analysis methods using traditional signatures might fail to detect some specific malware.

Dynamic analysis detects the behaviour of malicious apps while the app is running so it can detect the behaviour of a malware regardless the signatures.

Then talking about the best signatures has just a partial meaning if the Android AV doesn't use also an effective behavioral/dynamic analysis method.
 
  • Like
Reactions: illumination, amico81, HarborFront and 2 others
tim one said:
Signature-based AVs might fail to detect obfuscated APK samples.
Many APK malware are obfuscated and use anti-debugging techniques.
Such protections not only prevent code inspection/modification, but also uninstall the application if such debugging is detected.

Again, sometimes every single string is encrypted with a custom algorithm, basically every reference to a string is replaced by a long array of integers.

You get the best detection by using static and dynamic analysis techniques and as said above, static analysis methods using traditional signatures might fail to detect some specific malware.

Dynamic analysis detects the behaviour of malicious apps while the app is running so it can detect the behaviour of a malware regardless the signatures.

Then talking about the best signatures has just a partial meaning if the Android AV doesn't use also an effective behavioral/dynamic analysis method.
Click to expand...
Ok, so which or what do you recommend for effective protection?
 
  • Like
Reactions: tim one
I don't use any av-software...my google pixel + monthly security patches + google play protect will be enough (y)
 
I installed Kaspersky (as I still have room for 4 more devices) on sister’s LG g4. Not pleased with it. She said that it killed her battery. I bet she uninstalled it by now
 

You may also like...