AV-Comparatives latest anti-virus software evaluation released

The AV-Comparatives No. 19 (2008-08) test report has been released recently. The Web version of the report has not yet been released, but users can download the PDF version. Is: bytes.

In general, the test results have not changed much compared with the previous test results, and the three products have made some progress compared with the test reports in July. The report also compares the 2008 and 2009 product versions. A few products scored slightly lower than the February test because they failed to detect a large number of malware. In general, the detection rate has not decreased significantly. The virus sample in this test has changed compared with the previous test, but it is also divided into two parts as before. Sample B contains the main actual malware, so the product's detection rate for this sample is relatively low. It is a bit disappointing that the false positive rate of many products has increased in this test. We recommend that security vendors not only focus on the detection rate, but also reduce the false positive rate.

　　Participating products and versions

Figure 1

　　Test Results

1. Default sample detection rate

Figure 2

Figure 3

Note: Bitdefender V2008 is similar to V2009, and its improvement mainly covers new features and other aspects.

F-Secure V2009 performs better than V2008. The Improvements mainly involve performance.

Figure 4

Microsoft and McAfee received a STANDARD rating this time, but both of them had the lowest false positive rate among these products.

McAfee's Artemis technology was not tested in this report. A separate test will be conducted soon.

Figure 5

　　2. Number of missed samples (the lower the better)

Figure 6

　　3. Sample Test ranking

Figure 7

　　4. false positive rate

A false positive is to treat an innocent file as an infected file. Anti-virus software is by no means a good anti-virus software to improve its ability to detect viruses regardless of false positives.

Figure 8

Among them, only two false positives were reported for McAfee and Microsoft products, and the other was an ESET with a relatively good performance. Sophos reported a maximum of 117 false positives.

　　5. Scan speed test

The scanning efficiency of anti-virus software is also worth considering. The scanning speed of the Anti-Virus engine is slow due to a variety of reasons. Code scanning, Virus Variant scanning, decompression depth, and support for other files all reduce the scanning rate of anti-virus software. The scanning speed also depends on the Anti-Virus engine settings and computer hardware conditions. The scanning throughput of several products is shown in.

Figure 9

　6. Overall Evaluation

Figure 10