Wednesday, May 25, 2011

AV-Comparatives Retrospective Test (static detection of new/unknown malicious software) – May 2011

AV-Comparatives has released an update to their latest Retrospective Test (static detection of new/unknown malicious software) – May 2011. Twelve vendors are included in the report. Only two vendors achieved the Advanced Plus (three star rating). In order, they were Avira and Kaspersky.

The top four vendors for proactive detection of new malware were G Data, Eset, Avira, and Kaspersky.

Vendors declining to participate in this test were in alphabetical order, Avast, AVG Technologies, K7, McAfee, PC Tools, Symantec, Trend Micro and Web Root. Twelve is probably the lowest number of vendors tested recently by AV-Comparatives.

Av-Comparatives goes into great detail in their document as to why these vendors may have passed on participating on this particular test. Among the reasons: real life capabilities would not be adequately represented in the test due to the absence of (a) a live Internet connection or because URL blocking was not considered. There's always the "if you know you may not perform well in a specific test...." Go to page 4 of the report for additional details.

In order to get comparable results, AV-comparatives tested all products with the highest settings, unless there were advised otherwise by the vendors. In the cloud functionality, was not used during this test. To view the report, go to
http://www.av-comparatives.org/images/stories/test/ondret/avc_retro_may2011.pdf

AV-Comparatives is an Austrian Non-Profit-Organization, which provides independent Anti-Virus software tests free to the public. www.av-comparatives.org

Note that there are other testing organizations as well. Individuals and companies evaluating AV and Internet Security SW should also look at the others, at reviews, round-ups, and group tests performed by reputable testing organizations, and technology publications. For information on testing best practices, people can go to the Anti-Malware Testing Standards Organization website (AMTSO), www.amtso.org

Sunday, May 22, 2011

AV-Comparatives Releases Preliminary Results For Their 2011 Whole Product Dynamic Test

AV-Comparatives has released their preliminary results through April 2011 of their Whole Product Dynamic Test. The companies with the top three products (preliminary results) are in order – Symantec, BitDefender and Eset. Avast in eighth, was the top free product. Seventeen companies were in the test. http://chart.av-comparatives.org/chart2.php Results will be published in July. The latest revision for this test came out in April.

Notes for how the test was set up are available at http://www.av-comparatives.org/images/stories/test/dyn/wpdt-general.pdf

In the August – November 2010 Whole Product Dynamic Test, F-Secure, Symantec, Avira, and Kaspersky had the top four products and received an advanced “three star" rating for the test. F-Secure fell to sixth and Avira to tenth in the preliminary Whole Product Dynamic Test for 2011.

About AV-Comparatives

AV-Comparatives is an Austrian Non-Profit-Organization. They provide independent Anti-Virus software tests free to the public. www.av-comparatives.org

Wednesday, May 18, 2011

Updata Partners to Acquire CA Technologies Internet Security Business Unit

On May 12, Computer Associates announced that they had entered into an agreement with Updata Partners, a technology-focused growth equity firm, to sell them the Internet Security Business Unit of CA Technologies. http://online.wsj.com/article/BT-CO-20110512-720864.html This transaction does not affect CA Technologies enterprise security business. This business is focused primarily on identity and access management software. The new company, marketing the security products sold by Computer Associates, will be called Total Defense, Inc.

While Computer Associate. remains a major enterprise security player, how good is/was their antivirus and internet security endpoint products?

CA’s endpoint solution did not appear in the Opswat Security Market Share Analysis Report. Symantec, AVG Technologies and Avast came in first through third, respectively in North America antivirus market share in this report. http://www.opswat.com/media/reports/MarketShareReportMarch2011.pdf

In Gartner’s December 2010 Magic Quadrant for Endpoint Protection Platforms, Computer Associates fell into the niche category.

Computer Associates Internet Security Suite 2011 failed to receive certification in av-test.orgs Q! 2011 test on Windows 7. They scored 2.0, 3.5, and 4.0, respectively on Protection, Repair, and Usability. http://www.av-test.org/certifications Their 2.0 score for protection was the lowest score among the more than twenty products tested.

Computer Associate’s business product had failed to receive a Virus BulletinVB100 award in three of the last seven tests they had entered. http://www.virusbtn.com/vb100/archive/vendor?id=39. Their consumer product was six for twelve in the last tests they had entered. http://www.virusbtn.com/vb100/archive/vendor?id=46

Their business endpoint solution scored around 60% on proactive detection and around 65% on reactive detection on Virus Bulletin’s October 2010 through April 2011 RAP test. This is not a stellar result. http://www.virusbtn.com/vb100/rap-index.xml

Security products being retained by Computer Associates include products involved with cloud security, secure access, secure identity, secure information, and security management. http://www.ca.com/us/it-security-solutions.aspx

Candidates to go after CA’s endpoint business – Symantec, McAfee, Sophos, and Trend Micro immediately come to mind. They all have enterprise strength endpoint solutions. This is less the case for Sophos, but Sophos’ primary focus is the business marketplace.

Sophos recently purchased Astaro. Astaro has security solutions in the areas of security gateways, gateway extensions, management tools, and hosted services. http://www.astaro.com

It will be interesting to see if Total Defense is any more successful selling Computer Associates’ endpoint security products than Computer Associates has been.

Computer Associates is a member of the Anti-Malware Testing Standards Organization. www.amtso.org .

Updata Partners invests in market-leading software, internet, and business services companies. We concentrate on growth and technology as the central value drivers in our investments, and work closely with management to position businesses for breakout success. www.updatapartners.com

na zdravĂ­ and proost to Updata in their venture. afscheid

Friday, May 13, 2011

Interop Las Vegas 2011, Best of Interop – IV

Traffic was good but not packed, at Interop Las Vegas on Wednesday. The Gigamon presentation was well attended over the course of the day. Their big giveaway was an Apple Airtouch.

“Virtual” seems to be the second work bubbling up at Interop Las Vegas, after the word “cloud”. It seems to be an unwritten requirement at the show.

Sound bites from some of the internet security vendors. ESET pushed their consecutive number of VB100 awards (and got testy when asked if awards and results more than three years old really made a difference). Test results they were showing were 1+ years old. Comodo was pleased with their survey results. GFI and Comodo both talked about how user interfaces were as important as “capture rates”. Trend Micro had their presence in the Cisco booth, talking about the Cisco ASA 5500 and their own content security software.

Watchguard mentioned their 2-year relationship with AVG Technologies and having AVG technology under the hood for their security appliances. Watchguard uses a different vendor for email gateway security.

The name of the game among a number of vendors was WAN acceleration. Secure web gateways were being shown on the floor as were NGFW’s, next generation firewalls.

On Wednesday, the energy level picked at 3 o’clock for the pub-crawl. Sizable amounts of alcohol seemed to be consumed.

The “vendor” party was held Wednesday evening. It had a sort of 80’s theme, and was held in Haze, one of the clubs at the new Aria Casino. It got crowded after 10. Some of the cocktail servers were channeling Devo with red flowerpots on their heads. Madonna songs played frequently.

The Best of Interop 2011

InformationWeek Analytics had 135 finalists for the Best of Interop awards. Below is a listing of the winners. For the complete article, a list of the finalists, and more information, go to http://www.bestofinterop.com/winners/

• Best of Interop (Overall) and Cloud Computing Category Winner - VMware - VMware vCenter Operations Standard 1.0
• Collaboration - Vidyo Inc. - VidyoMobile
• Data Center & Storage - Alcatel-Lucent – Alcatel-Lucent Data Center Switching Solution Blueprint
• Infrastructure - NEC Corporation – NEC ProgrammableFlow Switch
• Network Management, Monitoring and Testing - BreakingPoint Systems, Inc. - BreakingPoint FireStorm CTM
• Performance Optimization - Talari Networks - Mercury T750 APN Appliance
• Security - Barracuda Networks, Inc. - Barracuda Flex
• Wireless & Mobility - Citrix Systems - Citrix Receiver for the iPhone
• Best Start-Up - Ciphertex Data Security

You would have to say that traffic was overall, okay. Perhaps akin to that of people strolling along Claude Debussylaan. The lunches are probably better at Bolenius than inside the exhibition hall at Interop Las Vegas.

Tuesday, May 10, 2011

Interop Las Vegas 2011 – III

It was a low-key day at Interop Las Vegas the first day the exhibition hall was open. One thinks that that this year’s Interop may be a bit slow when they have drawings for iPads at the keynote. The giveaway du jour at this year’s event is remains the iPad, similar to RSA San Francisco, several months ago.

Traffic on Interop Las Vegas exhibition floor seemed okay, though not stupendous. Rows began with 500, rather than 100. Interesting… Best tchotchke? A car giveaway is going on. The iPad giveaway seems to be fairly common. Shirts are not as prevalent as they once were.

McAfee put out a press release about their cloud security platform but were referring people to their parent company, Intel, to learn about it. Perhaps it was discussed during the presentations. Riverbed Technology and Akamai announced a partnership. Results of this partnership will not be seen until 2012. http://www.theregister.co.uk/2011/05/10/akamai_riverbed_cloud_optimizer/ . Trend Micro? No booth but they were talking about their cloud offering in the Cisco booth and will be giving a session on “The Evil Hack in the Sky, Cloud Security”, on Wednesday. Blue Coat Systems is leading three sessions, “The New Age of Wan Optimization” (Thursday), “Breakthrough Wan Technologies” (Wednesday), and “Cloud, Video and Internet: Redefining the Requirements for WAN Optimization” (Wednesday). Blue Coat also had a pair of press releases on Tuesday, “Blue Coat breaks the Barrier for Public Cloud Optimization” and “Blue Coat Defines Next Generation WAN Optimization”.

Workouts people could have at the show for prizes? Virtual boxing, putting, riding a mechanical bull, and racing miniature racecars.

Internet Security vendors ESET, Comodo, McAfee, and G Data were all within close proximity of one another on the floor. No barbs were being thrown. ESET had the largest booth and tallest employee. Comodo seemed to be talking partnerships.

If you had to pick one booth for having the hired booth staff that most epitomized Las Vegas? Securence.

Wednesday should be the busiest day on the show floor in the afternoon with the 3:00 to 5:00pm pub-crawl.

They keynote panel on Wednesday “How to Avoid Post Cloud Traumatic Stress Disorder”. Representatives from Citrix, Terremark Worldwide, and Rackspace Hosting will be on the panel. http://www.interop.com/lasvegas/conference/keynote-speakers.php

Sunday, May 08, 2011

Interop Las Vegas 2011 - II

Attendees and vendors have started to flow in to Las Vegas for Interop Las Vegas 2011. Should have placed “something” on the Mavericks. Monday is the big set-up day for exhibitors. The exhibition part of Interop is Tuesday through part of Thursday with Thursday afternoon being when the “trading of the tchtotchkes” among vendors will occur. For those who haven’t tired of that yet.

In perusing titles of presentations to see what the key topics will be, “cloud” does appear to be one of them. Of course, having its own track does give cloud an advantage. http://www.interop.com/lasvegas/conference/cloud-computing.php .

The first keynote at Interop Las Vegas on Tuesday also points in the direct of cloud, cloud computing, and cloud security being hot topics. “Change the Rules of Networking to Enable the Cloud” is the topic by Hewlett Packard’s Dave Donatelli. Microsoft’s Zane Adams will be speaking on “Public Cloud: The Transformational Opportunities Ahead" on Tuesday. http://www.interop.com/lasvegas/conference/keynote-speakers.php .

Correction to previous blog. Symantec does not have a formal booth presence at Interop Las Vegas. Under Huawei Symantec, yes. http://www.huaweisymantec.com/en/ . Comodo, voted the top free Internet Security Suites in a decidedly unscientific poll by download.com will be present in booth 757. That’s 2/3 of a very popular number in Las Vegas. http://kensek.blogspot.com/2011/03/comodo-internet-security-suite-tops.htm . The Czech Trade Promotion Agency has a booth presence at Interop Las Vegas to promote international trade and cooperation between Czech and foreign companies. Booth 1965-D.

No IPO (initial public offering) sharks seen today. The only visible sharks were the ones in the Mandalay Bay Shark Exhibit. The first Interop Las Vegas package arrived under the door Sunday evening. There will be more.

Thursday, May 05, 2011

Interop Las Vegas 2011

“How is a $20 bill like a shirt (during Interop Las Vegas)? Neither one gets changed the whole week.” So complained a waitress about the lack of generosity of some of the attendees during Interop Las Vegas. More than one individual may learn that seeing the Matt Damon, Kevin Spacey movie, “21” does not make one a card counter. Hopefully, people won’t get confused that “The Lion King” has actors portraying lions and other African mammals while “Cheetah’s” has cougars.

Interop Las Vegas, smaller in size from its peak from the .com bubble burst a decade ago, remains one of the pre-eminent technology trade shows in North America. Less focused than RSA San Francisco 2011, they will still attract a sizeable crowd during its run, May 8 through 12th http://www.interop.com/lasvegas/

Over 350 companies and around 15k attendees will be taking over Mandalay Bay and some of the other casino/hotels during the week of April 8 at Interop Las Vegas. At, RSA in San Francisco, presentations had to include the words “cloud” and “virtual” in order to get any attention. It will be interesting to see what the buzz phrases are during Interop.

The security track at Interop Las Vegas will be Information Security and Risk Management Other tracks include - Cloud, Data Center, Enterprise 2.0, Future of Work, Networking, Storage, United Communication, Video Virtualization, Wireless and Mobility.

While Interop Las Vegas has much more breadth compared to RSA, there will be a number of security companies attending. These include companies involved in internet security, Symantec, McAfee, Barracuda, for example. Sophos and Kaspersky will not be in attendance. The only “avast” that will be heard will be at Treasure Island at the other end of the strip. To see a list of companies whose foci include security http://www.interop.com/lasvegas/2011/exhibitor-list/#products-services-tab

The focus of this blog during Interop week is still TBD. It will not be on IPO, initial public offering, or loans. The best tchotchkes and the companies giving them out may be listed. Companies who are the most aggressive in hiring “las Vegas” type booth help may be listed. Interesting talks may be covered. Some of the keynotes may be discussed. As always, there are parties at night. Much above avg parties. After all, this is Vegas, Baby! Speakers from Cisco, IBM, Citrix, Internet pioneer Vincent Cerf, and others. No Bill Clinton like RSA had. http://www.interop.com/lasvegas/conference/keynote-speakers.php

What happens in Vegas.....

Wednesday, April 27, 2011

Best Internet Security Suites 2011 – PC Magazine

The table below lists the Best Internet Security Suites of 2011 as reviewed by PC Magazine and Neil Rubenking. The ratings are from high to low and then reverse alphabetical order (just to be different). http://www.pcmag.com/article2/0,2817,2373529,00.asp

The last figure in each row reflects the number of stars awarded by www.av-comparatives.org in their February 2011 "On-demand Detection of Malicious Software". This figure has the following caveats; Antivirus products were used, not internet security suites; where there is a blank, that company’s antivirus product was not tested by AV Comparatives.

Best Internet Security Suites 2011 – PC Magazine


4.5 - Norton Internet Security Suite 2011 2
4.5 - Norton 360 Version 5.0 2
4.0 - Webroot Internet Security Suite 2011 Tested
4.0 - Kaspersky PURE Total Security 3
4.0 - Kaspersky Internet Security 2011 3
4.0 - Astaro Security Gateway
3.5 - Trend Micro Titanium Maximum Security 2011 1
3.5 - McAfee Total Protection 2011 3
3.5 - BitDefender Total Security 3
3.5 - Avast! Internet Security 6.0 2
3.5 - Ad-Aware Total Security
3.0 - PC Tools Internet Security 2011 1
3.0 - Outpost Security Suite Free 7.0
3.0 - G Data TotalSecurity 2011 2
3.0 - F-Secure Internet Security 2011 3
2.5 - Trustport Internet Security Suite 2011 3
2.5 - Outpost Security Suite Pro 7.0
2.5 - Bullguard Internet Security 2011
2.5 - AVG Internet Security 2011 1
2.0 - eScan Internet Security Suite 2011 3


PC Magazine reviews each of the products in the table in detail. People looking for a solution should look at these individual reviews. They contain detailed (and extremely knowledgeable) qualitative data about the products as well as results of malware tests that were done by PC Magazine. Many of the companies also offer more than one internet security suite. Another reason to visit their web sites.

Individuals interested in only an antivirus solution can go to “Best Antivirus Software of 2011 – PC Magazine” at http://kensek.blogspot.com/2010/11/best-antivirus-software-for-2011-pc.html for a ranking of these solutions.

Individuals interested in a table showing internet security suite rankings that combine PC World, PC Magazine and about.com rankings can go to http://kensek.blogspot.com/2011/02/pc-world-pc-magazine-and-aboutcom.html

To see an evolving compilation of Best Antivirus 2012 reviews, go to http://kensek.blogspot.com/2011/08/best-antivirus-software-2012-pc.html

People should also review (it's also free to download) the AV Comparatives document. It contains a great deal of content about the testing, detection rates, missed samples, false positives, and scanning speeds (and more). People may also want to go to www.av-test.org and www.virusbtn.org to look at additional tests. To learn about test standards, you may wish to visit the Ant-Malware Testing Standards site at www.amtso.org .

Internet security suites vary greatly in what features they provide. They could include, for example, identity protection, backup and restore, free online storage, PC tuneup, free email, chat, and phone support, parental controls, password managers, data encryption, file shredding, remotely lock files, extend protection to smart phones, and authenticate hotspots. These examples are from Norton, Kaspersky, and Trend Micro. http://us.trendmicro.com/us/products/personal/titanium-internet-security/ , http://usa.kaspersky.com/products-services/home-computer-security/pure

There is more to a product review than just counting the "likes" on a Fan Page ;) . Sometimes the wisdom of experts is better than the collective wisdom of crowds, with all due respect to James Surwiecki.

AV-Comparatives is an Austrian Non-Profit-Organization, which is providing independent Anti-Virus software tests free to the public. For more information, go to www.av-comparatives.org

Tuesday, April 19, 2011

2011 SC Magazine Awards Europe - Winners Announced

The 2011 SC Magazine Awards Europe winners were announced Tuesday evening, April 19. The awards gala took place at the London Hilton on Park Lane. Sophos and McAfee were both double winners on Tuesday evening. McAfee was also a double winner in the SC Awards US 2011 event held in San Francisco in February during (but not part of) the RSA security show. It remains to be seen whether representatives of the winning organizations will be given invitations to the upcoming royal wedding.

Best anti-malware solution

Sophos - Anti-Virus for Mac Home Edition

Best content security

Websense - Triton

Best network security

McAfee - Network Security Platform

Best integrated security solution


ArcSight - Logger 5

Best DLP solution

Safend - Data Protection Suite

Best encryption solution

PGP by Symantec - Remote Disable and Destroy (RDD)

Best IAM solution


CA Technologies - Identity Manager

Best remote access


Becrypt - Trusted Client

Best security management

McAfee - ePolicy Orchestrator

Best SME security solution


Qualys - QualysGuard Express

Best security solution, financial services


Actiance - Vantage

Best enterprise security solution


Good Technology - Good for Enterprise

Best secure transaction solution


Thales - payShield 9000

Best secure virtualization solution

Check Point - Check Point Security Gateway Virtual Edition

Innovation award

ActiveBase - ActiveBase Security

Information security consultancy of the year


KPMG

IT security value added reseller of the year


Brookcourt Solutions

MSSP of the year

Dell SecureWorks

Information security product of the year


Actiance - Unified Security Gateway

Information security project of the year


British Gas - Keep Mum

Information security team of the year


Barclaycard - Barclaycard Payment Security team

Rising star award

Ross Leaning, executive advisor, KPMG

CEO of the year


Philippe Courtot, chairman and CEO, Qualys

Information security person of the year


Mark Brown, chief information security officer, SABMiller

Information security vendor of the year

Sophos


The short list for SC Awards Europe 2011 finalists is at http://www.scmagazineuk.com/awards-shortlist/section/348/

Judging

The judges for the Technology and Industry Awards are drawn from the senior ranks of the information security profession. The Professional Awards are judged by a separate panel drawn from the SC editorial team

What the SC Magazine Awards Europe 2011 Mean for the Vendors


• Third party validation by a leading dedicated security publication
• Third party validation by peers
• Marketing/promotional rights for a year, subject to licensing
• A number of potential marketing/branding/lead generation opportunities for the recipients

Symantec was a winner in four categories for the awards in the US. McAfee was nominated in fourteen categories and won in two of these.

A listing of the SC Awards 2011 US winners is at

http://kensek.blogspot.com/2011/02/sc-awards-2011-us-announced.html

Sunday, April 17, 2011

April 2011 - Virus Bulletin RAP Averages Quadrant, October 2010 through April 2011

Virus Bulletin has released their latest RAP Averages Quadrant, representing October 2010 through April 2011 data.

Achieving greater than 90% for Reactive Detection and greater than 70% for Proactive Detection on the RAP Averages Quadrant were Bkts, AVG, Symantec, Kaspersky, Avast, F-Secure, MicroSafe, eScan, ESET, ZeoBit, UnThreat, G-Data, Avira (Pro and Free), Check Point, TrustPort, Coranti, Lavasoft Total, and Kaspersky Pure. Avira Free had the top Reactive Detection. Coranti and LavaSoft Total had the highest Proactive Detection. The order of these is from (approximately) left to upper right.

On the previous test, those achieving greater than 90% for Reactive Detection and greater than 70% for Proactive Detection on the RAP Averages Quadrant were Kaspersky AV, AVG Technologies, Kaspersky IS, Avast, eScan, ESET Bkis BKAV Home Plus, G-DATA, TrustPort, Zeobit, Check Point, Avira Free, and Coranti. Coranti received the highest score for Proactive Detection and TrustPort for Reactive Detection at about 98% and 91% respectively. http://kensek.blogspot.com/2011/02/virus-bulletin-rap-averages-quadrant.html

This test measures products' detection rates across four distinct sets of malware samples. The first three test sets comprise malware first seen in each of the three weeks prior to product submission. These measure how quickly product developers and labs react to the steady flood of new malware emerging every day across the world. A fourth test set consists of malware samples first seen in the week after product submission.

This test set is used to gauge products' ability to detect new and unknown samples proactively, using heuristic and generic techniques. A detailed description can be viewed at http://www.virusbtn.com/vb100/vb200902-RAP-tests

The relative performance of vendors can best be viewed by looking at the RAP Averages Quadrant (October 2010 through April 2011) chart at http://www.virusbtn.com/vb100/latest_comparative/index Subscribers to Virus Bulletin's publications have access to more details on the results.

UK based Virus Bulletin www.virusbtn.com started in 1989. The organization provides PC users with a regular source of intelligence about computer viruses, their prevention, detection and removal, and how to recover programs and data following an attack. VB’s website is at www.virusbtn.com . The site is a great source of information on malware and spam. They are a member of the Anti-Malware Testing Standards Organization, www.AMTSO.org.

AV-Comparatives on Demand Detection of Malicious Software – April 2011 (Latest Revision)

AV-Comparatives has released an updated to their latest On Demand Detection of Malicious Software report – April 2011. Twenty vendors are included in the report. Advanced Plus (3 star ratings) were achieved by seven vendors. In order, they were TrustPort, F-Secure, BitDefender, Avira, eScan, Kaspersky, and McAfee.

G-DATA, TrustPort, and Avast ranked one, two, and three, respectively, with the percentage of least samples missed. All were under two percent.

Of the vendors best known for free antivirus protection, Avira received Advanced Plus certification (3 stars) Avast received Advanced Certification (two stars) and AVG Technologies, Standard Certification (one star). According to the report, by request of the respective vendors, these vendors’ free versions of software were used, avast Free Antivirus, AVG Anti-Virus Free Edition, and Avira AntiVir Personal.

AV-Comparatives consulted with vendors with respect to what settings to use for the test. For the complete report, go to the AV-Comparatives web site. There you will find details on samples used, testing methodology, scanning speed results, and more.

AV-Comparatives is an Austrian Non-Profit-Organization, which provides independent Anti-Virus software tests free to the public. www.av-comparatives.org

Note that there are other testing organizations as well. Individuals and companies evaluating AV and Internet Security SW should also look at the others, at reviews, round-ups, and group tests performed by reputable testing organizations, and technology publications. For information on testing best practices, people can go to the Anti-Malware Testing Standards Organization website (AMTSO), www.amtso.org

Thursday, March 24, 2011

March 2011 OPSWAT Report on Worldwide Antivirus Application Market Share

On March 8, OPSWAT Inc. published their report on “Worldwide Antivirus Application Market Share”. The results may not mesh completely with the results published by the vendors themselves (surprise!). The data used by OPSWAT for their market share report was collected between November 16, 2010 and February 15, 2011.

Worldwide Market Share Leaders – Companies

The top 5 companies with respect to worldwide market share were

• Avast Software (16.2%) – was in first in June report
• Avira (13.2%) – was in second in June report
• AVG Technologies (11.5%) – was in fifth in June report
• ESET Software (10.3 – was in eight in June report
• Symantec (9.5%) – was in third in June report

The table in the document lists the top 15. Symantec leads in North America vendor market share with 16.2%.

Worldwide Market Share Leaders - Product


The top 5 products with respect to antivirus product market share were

• Avast Free Antivirus (11.6%) – was in first in June report
• Avira AntiVir Personal Free Antivirus (11.0%) – was in second in June report
• Microsoft Security Essentials (7.0%) – was in fourth in June report
• AVG Antivirus Free (6.8%) – was in third in June report
• ESET NOD32 Antivirus (6.4%) – was in eight in June report

The table in the report contains the top 15. Microsoft leads in North American Antivirus product market share with 10.2%

Other tables in the report include the above but focusing on North America percentages rather than global.

The order of the top 3 may be surprising to some people since on CNET’s download.com site. The typical weekly download order for the top three products is AVG, followed by Avira and Avast. Download.com isn’t the only download site for these vendors.


The press release for the above can be viewed at
http://www.opswat.com/media/news/opswats-q1-market-share-report-names-symantec-as-the-north-american-market-leader

The report can be downloaded at

http://www.opswat.com/media/reports/MarketShareReportMarch2011.pdf

So who is kicking butt in security?

http://www.itworldcanada.com/blogs/cdn/2011/03/18/so-who-is-kicking-butt-in-security/62889/

Some interesting bullet points from IT World Canada and a recent NPD Group report (www.npd.com)

• Symantec and McAfee grew collectively at just under eight per cent in North American retail (sales unit volume) last year
• Kaspersky grew by a whopping 165 per cent, Webroot did well at 85 per cent and Trend Micro had a great year at 71.1 per cent. growth
• Some other players such as Panda Security and AVG Technologies regressed

About OPSWAT – www.opswat.com

Founded in 2002, OPSWAT is the industry leader in software management SDKs, interoperability certification and multiple engine scanning solutions. With both manageability and multi-scanning products, OPSWAT offers simplified and comprehensive SDKs that reduce time and costs for your engineering and testing teams

Friday, March 04, 2011

Comodo Internet Security Suite Tops CNET Poll of Consumer Free Antivirus, Internet Security Suites

May update - While Comodo Internet Security Suite may have topped this poll, the product failed to receive certified in www.av-test.org Q1 2011 certification test running on Windows 7. This was one of five products to fail certification. Others were CA Internet Security Suite, McAfee Total Protection 2011, Norman Security Suite, and PC Tools Security Suite 2011. http://www.av-test.org/certifications.php

In a poll of nine consumer free antivirus and internet security suites by CNET, Comodo Internet Security Suite topped the competition, followed by, Avast Free Antivirus 6, and Ad Aware Free Internet Security. . The poll ran for several days in late February and Early March. http://download.cnet.com/8301-2007_4-20036621-12.html

The percentages are from CNET’s poll. The next number is PC Magazine’s Neil Rubenking’s rating (out of 5.0)

1. 42%, 2.5 - Comodo Internet Security 5.0*
2. 18%, 3.5 - Avast Free Antivirus 6
3. 12%, 4.5 - Ad Aware Free Internet Security 9
4. 11%, 4.0 - Panda Cloud Antivirus Free 1.3*
5. 08%, 3.5 - AVG Free Antivirus 2011

The above has no correlation with the number of weekly downloads on CNET’s site. The usual weekly order has been (primarily North America) is AVG Free Antivirus, Avast Free Antivirus, and Avira Antivir in the top three spots.

About the Poll

About 137k votes were cast. It appears as if people could vote only once. The poll was a combination of antivirus products and internet security suites. Some companies were actively soliciting votes from users and their fan pages.

Product Reviews and Rankings

*Below are links to PC Magazine reviews of the products. Note that the version numbers do not always mesh with the versions in the survey (*). Also below is a link to a blog listing PC World’s top 5 free antivirus products of 2011.

• Ad-Aware Pro Internet Security 9.0 http://www.pcmag.com/article2/0,2817,2373984,00.asp
• AVG Antivirus Free Edition 2011 http://www.pcmag.com/article2/0,2817,2370108,00.asp
• Avast Free Antivirus 6 http://www.pcmag.com/article2/0,2817,2381362,00.asp
• *Comodo Internet Security 4 http://www.pcmag.com/article2/0,2817,2363256,00.asp
• Panda Cloud Antivirus 1.3 http://www.pcmag.com/article2/0,2817,2364844,00.asp and http://www.pcmag.com/article2/0,2817,2371589,00.asp


Free vs. Fee: Free and Paid Antivirus Programs Compared – PC World Antivirus Review (note that these are antivirus products, not internet security suites)

http://kensek.blogspot.com/2010/12/free-vs-fee-free-and-paid-antivirus.html

Monday, February 28, 2011

Avast Introduces Avast 6 Product Line

Internet Security provider Avast! released version 6 of their latest internet security offerings during the last week of February. This includes on the consumer side, their free consumer product, Avast Free Antivirus 6, Avast Pro Antivirus, and Avast Internet Security. Avast is now promoting 149 million product registrations for their solutions (each company seems to define "registration" and "registered user" differently).

What’s New with Avast 6?

• avast! WebRep - Provides website reliability and reputation ratings according to community-provided feedback.
• avast! SafeZone - Opens a new (clean) desktop so that other applications don’t see what’s happening – perfect for banking or secure ordering/shopping – and leaves no traces once it’s closed.
• AutoSandbox - Prompts users to run suspicious applications in the virtual Sandbox environment.

Utilizing virtual desktops has been growing in corporate environments as a means to protect users and the network. This technology appears to be migrating to the consumer marketplace now, as well.

What Avast is promoting in Avast Free Antivirus 6?

• AutoSandbox – Avast says that this is the first automatic virtualization feature in a major antivirus package. AutoSandbox identifies suspicious applications and automatically prompts users to run them in a safe virtual environment
• WebRep – Avast claims that this is first reputation guide for malware and website content incorporated into a free antivirus application.
• The product also includes Web and Script shields, protecting users at the http and browser level, and site blocking

Why Upgrade to Avast Pro Antivirus or Avast Internet Security?


Avast introduces SafeZone, their version of virtual machine technology with their Avast Pro Antivirus and Avast Internet Security Suite 6 solutions. As mentioned above, SafeZone creates a virtual desktop within the computer. According to Avast, it prevents private data from going outside via malware and blocks out applications such as malware.

For safety while shopping or banking online, Avast pushes the upgrade to Avast Pro Antivirus. Safely shop or bank online. Upgrading to Avast Internet Security adds identity and data protection, an advanced firewall and spam protection to the mix.

For a detailed comparison between what is in the paid two consumer products, go to http://www.avast.com/internet-security#tab4

What are reviewers saying about Avast Free Antivirus 6?

CNET gave Avast Free Antivirus 6 4.5 stars out of 5. Rosenblatt’s conclusion:
“When it comes to your security, Avast Free Antivirus 6 gets a lot right. It's got a usable, uncluttered interface, solid although not stellar benchmarks, and a set of features that keeps it at the forefront of Windows security. Using the Internet safely is no longer just about not getting phished and downloading only known-safe files, and the improvements in Avast 6 address modern security risks comprehensively. Although we'd like to see stronger efficacy benchmarks in the future, Avast remains one of the best free security options around and is well worth downloading.” http://download.cnet.com/Avast-Free-Antivirus/3000-2239_4-10019223.html .

PC Magazine's Neil Rubenking gave Avast Free Antivirus 6 3.5 stars out of 5. His bottom line comment - "Avast! Free has some dandy new features, and it's a great-looking program. However, the new features didn't shine in my testing. It needs to do a better job cleaning up the threats it detects. Since its' free, you can give it a try and make your own decision."

http://www.pcmag.com/article2/0,2817,2381362,00.asp

PC World rated Avast Free Antivirus 5 their top free solution in a December article with 4.5 stars out of 5.0. They rated Avast Pro Antivirus 5 3rd to Norton and BitDefender with a score of 4.0 out of 5.0 (tied with G Data). http://kensek.blogspot.com/2010/12/free-vs-fee-free-and-paid-antivirus.html

What are the test organizations saying about Avast 6?


As of March 1, nothing. Interested parties should go to the respective websites, for details on any testing that has been performed. Available test results are using version 5.

Virus Bulletin (www.virusbtn.org) – Archived results for Avast are available at http://www.virusbtn.com/vb100/archive/results?vendor=VE9 Pay attention to exactly which product was tested. Avast has received VB100 awards for the last 12 tests they've entered.

Avira's free solution was the best performing "free" product in Virus Bulletin's latest RAP test, followed by Avast and AVG Technologies, respectively.

http://www.virusbtn.com/vb100/latest_comparative/index

AV-comparatives (www.av-comparatives.org) - Any test results performed on prior versions of Avast! products can be viewed at www.av-comparatives.org . Pay attention to exactly which product was tested.

AV-test.org (www.av-test.org) - Any test results performed on prior versions of Avast! can be viewed at http://www.av-test.org/ . Pay attention to exactly which product was tested.

ICSA Labs (www.icsalabs.org) - Results can be viewed at https://www.icsalabs.com . Pay attention to exactly which product was tested. ICSA Labs tested Avast's free product (earlier release)

https://www.icsalabs.com/products?tid[]=4216&tid_1[]=4259&x=34&y=8&=Apply

Wednesday, February 23, 2011

SC Awards Europe 2011 - Finalists Announced

The SC Awards Europe 2011 finalists were announced February 23. The awards gala will take place at the London Hilton on Park Lane on Tuesday April 19. Symantec, McAfee, Sophos, Websense, and Webroot are finalists in multiple product categories (McAfee was a finalist in about 14 categories in the SC Awards US 2011). Below is a detailed listing of finalists for the product awards.

Best Anti-Malware Solution
• Kaspersky Lab Kaspersky Open Space Security (KOSS) 2010
• M86 Security M86 Secure Web Gateway 10.0
• McAfee McAfee Endpoint Protection Suite
• Sophos Sophos Anti-Virus for Mac Home Edition
• Symantec Symantec Endpoint Protection

Best Content Security
• Clearswift Clearswift Secure Web and Email Gateway
• LANDesk LANDesk Security Suite
• McAfee McAfee Web Gateway
• Symantec Symantec Web Gateway
• Websense TRITON
• Webroot Webroot Web Security Service

Best Network Security
• GFI Software GFI LANguard 9.6
• McAfee McAfee Network Security Platform
• Sourcefire Sourcefire IPS

Best Integrated Security Solution
• ArcSight ArcSight Logger 5
• LogRhythm LogRhythm

Best IAM Solution
• Aveksa Aveksa 4.0
• CA Technologies CA Identity Manager
• Courion Courion Access Assurance Suite
• Lieberman Software Enterprise Random Password Manager (ERPM)
• Symantec (VeriSign) VeriSign Identity Protection Access for Mobile

Best Remote Access
• Becrypt Becrypt Trusted Client
• Check Point Software Technologies Check Point Abra
• Tectia Tectia MobileID
• Websense TRITON

Best Security Management
• McAfee McAfee ePolicy Orchestrator (ePO)
• Symantec Symantec Control Compliance Suite
• Venafi Venafi Encryption Director

Best SME Security Solution
• ArcSight ArcSight Express
• Egress Software Technologies Egress Switch
• Qualys QualysGuard Express
• SafeNet SafeWord 2008
• Secunia Secunia Corporate Software Inspector
• WatchGuard WatchGuard XTM 5 Series

Best Enterprise Security Solution
• Absolute Software Absolute Manage
• Good Technology Good for Enterprise
• nCircle nCircle Suite360
• Qualys QualysGuard IT Security and Compliance Suite
• Sourcefire Sourcefire IPS
• Trustwave Trustwave SIEM OE

Best Security Solution, Financial Services
• ArcSight ArcSight FraudView
• Egress Software Technologies Egress Switch
• nCircle nCircle Configuration Compliance Manager
• Skybox Security Skybox View 5.0
• Actiance Vantage

Innovation Award
• ActiveBase Security ActiveBase
• ArcSight ArcSight Logger 5
• SunFive (represented by SecureGrade) Boole Server
• M86 Security M86 Secure Web Gateway 10.0
• Oval Oval Data Loss Protection Risk and Insurance Solutions
• Cyber Security Technologies P2P Marshal

Best Secure Virtualisation Solution
• Check Point Software Technologies Check Point Security Gateway Virtual Edition
• AEP Networks CloudProtect
• Sourcefire Sourcefire IPS
• Symantec Symantec Protection Suite for Servers

Best Encryption Solution
• Becrypt Becrypt DISK Protect
• Symantec PGP Remote Disable and Destroy (RDD)

Best DLP Solution
• Lumension Lumension Device Control
• McAfee McAfee Data Loss Prevention
• Safend Safend Data Protection Suite
• Symantec Symantec DLP v11
• Trustwave Trustwave Data Loss Prevention

Best Secure Transaction Solution
• SafeNet Luna SA
• Thales payShield 9000
• Symantec (VeriSign) SSL Certificates
• Voltage Security Voltage SecureData Payments

Information Security Product of the Year
• SunFive (represented by SecureGrade) Boole Server
• Cyber-Ark Software Cyber-Ark PIM Suite
• Qualys QualysGuard IT Security and Compliance Suite
• Actiance Unified Security Gateway
• Varonis Systems Varonis Data Governance Suite
• Veracode Veracode SecurityReview

Information Security Vendor of the Year
• Absolute Software
• Kaspersky Lab
• Qualys
• Sophos
• Webroot

Professional Awards To Be Given Out At SC Awards 2011


• Information Security Person of the Year
• Information Security Project of the Year
• Information Security Team of the Year
• The Rising Star Award
• Information Security Consultancy of the Year
• IT Security VAR of the Year
• MSSP of the Year
• CEO of the Year

Finalists in these categories as well as the product categories can be viewed at
http://www.scmagazineuk.com/awards-shortlist/section/348/

The judges for the Technology and Industry Awards are drawn from the senior ranks of the information security profession. The Professional Awards are judged by a separate panel drawn from the SC editorial team

What the SC Magazine Awards 2011 Mean for the Vendors

• Third party validation by a leading dedicated security publication
• Third party validation by peers
• Marketing/promotional rights for a year, subject to licensing
• A number of potential marketing/branding/lead generation opportunities for the recipients

A listing of the SC Awards 2011 US winners is at http://kensek.blogspot.com/2011/02/sc-awards-2011-us-announced.html

For more information and to book tickets for the event, go to www.scawardseurope.com

Thursday, February 17, 2011

2011 Global Product Excellence Awards Announced by Info Security Products Guide

Info Security Products Guide announced their 2011 Global Product Excellence Awards at a ceremony in San Francisco on February 16. The awards function took place during RSA 2011 (not part of RSA 2011).

Product Categories – 2011 Global Product Excellence Awards


Access
• Bomgar Corporation for Bomgar Box

Anti-Malware, Anti-Spam or Anti-Virus
• Faronics for Faronics Anti-Executable

Auditing
• Secure Passage for FireMon

Authentication Solution (Multi, Single or Two-Factor)
• TeleSign for Real Time Telephone Verification

Best Security Hardware Product (New or Updated version)
• Juniper Networks for SRX1400 Services Gateway
• Solera Networks for Solera DS 5200 Network Forensics Appliance

Best Security Software Product (New or Updated version)
• Sentrigo, Inc. for Hedgehog Dbscanner

Best Security Service (New or Updated version)
• Oberthur Technologies for System-One™

Compliance
• Accellion, Inc. for Accellion Secure File Transfer
• Panoptic Security for ExpertPCI™

Content Security
• SonicWALL for SonicWALL CSM3200

Data Leakage-Protection/ Extrusion Prevention
• Black Box Corporation for Veri-NAC™

Encryption
• Safend Ltd. for Safend Data Protection Suite

Endpoint Security
• SonicWALL for SonicWALL NSA E8500

Identity Management
• Courion Corporation for Courion Access Assurance Suite solution version 8.0

Intergated Security/ Unified Threat Management (UTM)
• Astaro for Astaro Security Gateway version 8

Intrusion Detection/Prevention
• Black Box Corporation for Intelli-Pass™

IPSec/SSL/VPN
• NCP Engineering, Inc. for NCP Secure Enterprise Solution

Network Management
• Vineyard Networks for Network Reporting Center

Network Security
• Wedge Networks Inc. for Wedge BeSecure Web Security Appliance Series

Managed Security Service
• Wipro Technologies for Wipro Global Security Operations Center (GSOC)

Policy Management
• nCircle for Configuration Compliance Manager

Risk Management
• Modulo for Modulo Risk Manager

SaaS/Cloud
• GlobalSCAPE, Inc. for GlobalSCAPE Managed Information Xchange (MIX)

Secured Archiving or Storage
• FileTek, Inc. for StorHouse

Security Information/ Event Management
• Trustwave for Trustwave SIEM

Security Solution for Enterprise (Large)
• Emulex Corporation for OneSecure Encryption Solution
• nuBridges for nuBridges Protect™

Security Solution for Enterprise (Medium)
• McAfee, Inc. for McAfee SaaS Endpoint and Email Protection

Security Solution for Small Businesses, SOHO, Consumers
• DigitalPersona, Inc. for DigitalPersona Pro

Social Media or Web/URL Filtering
• St. Bernard for iPrism Web Filter

Vulnerability Assessment/Remediation/Management
• Application Security, Inc. for DbProtect Vulnerability Management

Web Application Security
• Imperva Inc. for SecureSphere Web Application Firewall

Wireless/Mobile Security
• Sybase for Afaria 6.6

New Products and Upgrades, Innovative Products
• NetClarity, Inc. for NACwall 2G appliance family

To see the above, and winners in the categories below, and to learn more about the Info Security Products Guide, go to
http://www.infosecurityproductsguide.com/excellence/2011/index.html

Non Product Categories

• Company and Organization Categories
• PR, Corporate Communications & Investor Relations Categories
• Product Management/Marketing Team of the Year
• Support and Customer Satisfaction Categories
• People Categories


What Product/Solution Winners Receive

Winners receive press, recognition, logos to use for sales and marketing purposes on their website, the web, and various lead generation campaigns. Colloquially - bragging rights and more!

About the Judging

Executives, PR and Corporate Marketing professionals, Industry Analysts and Experts, End-users, Editors and others applied to assist with the preliminary judging of products. Finalists were judged via online collaboration. Judges could not judge products they were affiliated with.
http://www.infosecurityproductsguide.com/excellence/judges/index.html

Observations From RSA Conference 2011 – Wednesday February 16

Much of the messaging at RSA Conference 2011 is around some combination of the words cloud, compliance, and VM. Presentations in the booths not working in those phrases are less well attended, except for the tchotchkes collectors.

IDC had a full room at their breakfast briefing on “Corporate & Consumer Security in the Next Decade: Peace, Love, & Happiness?” About a dozen of their analysts took part in a panel discussion with the attendees.

It was a (personal) day attending booth presentations from web security, firewall, and endpoint security vendors. Some bullet point observations:

• Trend Micro - Filled the theatre room within the exhibition hall with their talk on what they were doing with VM, among other topics.

• Symantec - Presentations, sneak peeks of Version 12 of the consumer internet security product. Talking about “Insight” as part of the product, and recruiting beta customers. They also have protection for Droid now. Double winner on Tuesday night from SC Awards 2011.

• Kaspersky – Has protection for Droid.

• Sophos – Interesting presentation on deconstructing a virus.

• McAfee - Naming names. One of their slides showed how their endpoint product has tested against a dozen of the usual suspects. Also prominently displayed their 12 Finalist and 2 Winner awards from SC Magazine 2011, awarded the previous night.

• ESET - Spoke about their performance, history of testing well with Virus Bulletin, and had a naming names slide showing how they perform versus some of their competitors.

Other endpoint companies with a presence on the exhibition floor included BitDefender, Bit9, Comodo, and GFI. If you don't have a presence on the floor...

A “What were they thinking?” question has to go to Barracuda for having an evening reception at the Gold Club, near Moscone Center and RSA. No dancers during the reception, but still. Supposedly, Barracuda's 2011 Tour Bus was owned by or leased from the Dave Mathews band.

Thursday on the exhibition floor is usually relatively quiet. Thursday evening is the Conference Codebreakers Bash at San Francisco City Hall. Bill Clinton will be giving the Friday keynote.

Wednesday, February 16, 2011

SC Awards 2011 US Winners

The SC Awards 2011 US Winners were announced at a ceremony on February 15 in San Francisco. These, the Excellence Awards, and the Professional Awards can also be viewed at http://www.scmagazineus.com/scawards2011-winners/section/2075/

For car racing fans, the best Security Team award went to Go Daddy.

SC Magazine Awards 2011, US Winners in the Reader Trust Category


Symantec was a winner in four categories. McAfee was nominated in fourteen categories and won in two of these.

Best Anti-Malware Gateway
• Winner: Cisco Systems for Cisco Web Security

Best AntiMalware Management
• Winner: McAfee for McAfee Endpoint Protection Suite

Best Computer Forensics Tool
• Winner: Guidance Software for EnCase Forensic

Best Data Leakage Prevention
• Winner: Symantec for Symantec Data Loss Prevention

Best Email Content Management
• Winner: Symantec for Symantec Brightmail Gateway

Best Email Security
• Winner: Sophos for Sophos Email Security Appliance

Best Endpoint/UTM Security
• Winner: Symantec for Symantec Endpoint Protection 11.0

Best Enterprise Firewall
• Winner: Cisco Systems for Cisco ASA 5585-X

Best Identity Management Application
• Winner: IBM for IBM Tivoli Identity and Access Assurance

Best Integrated Security-UTM
• Winner: SonicWALL for SonicWALL NSA 2400MX

Best IDS/IPS
• Winner: Sourcefire for Sourcefire IPS (based on Snort)

Best IPsec/SSL VPN
• Winner: Cisco Systems for Cisco ASA Secure Remote Access solution

Best Managed Security Service
• Winner: SecureWorks Managed Security Services

Best Mobile/Portable Device Security
• Winner: Symantec for Symantec Endpoint Protection Mobile Edition

Best Multifactor
• Winner: RSA, the security division of EMC, for RSA SecurID Authentication

Best Policy Management
• Winner: Cisco Systems for Cisco Network Admission Control Appliance

Best Security Information/Event Management (SIEM)
• Winner: ArcSight for ArcSight ESM

Best Vulnerability Management Tool
• Winner: Qualys for QualysGuard Vulnerability Management (VM)

Best Web Application Firewall
• Winner: SonicWALL for SonicWALL Web Application Firewall Service

Best Web Content Management
• Winner: Websense for Websense Web Security Gateway

SC Awards Europe 2011 Finalists

Go to http://kensek.blogspot.com/2011/02/sc-awards-europe-2011-finalists.html

Judging/Voting for the Reader Trust Awards

A panel of readers who represent the circulation of SC Magazine chooses winners. The Reader Trust Voting Panel is comprised of SC Magazine readers who have volunteered their time and experience to carefully consider each of the contenders in each category to cast votes

What These Awards Mean for the Recipients

• Third party validation by a leading dedicated security company
• Third party validation by peers
• Marketing/promotional rights for a year, subject to licensing
• A number of potential marketing/branding/lead generation opportunities for the recipients

Tuesday, February 15, 2011

RSA Conference 2011 – February 15th, a Light Look

Messaging, presentations et cetera to be discussed on another blog.

Booth traffic in general was okay. This was the first full day of the exhibition. Extravagance of the booths was definitely toned down as opposed to pre dot com bust.

Tchotchkes - Candy. T-shirts (including an 'IT happens' one), pens,light pens, one eyed plastic creatures, stress capital domes, blinking 'ice cubes', stress balls. Single chapter “IT Topic (fill in the blank) for Dummies”. Next level up, drawings for software for the people attending the presentation, some ear buds, gift cards. iPads are the end of the day giveaway du jour. Grand prize giveaways. A two-person car and a Harley.

Booth activities – the usual talks, magicians. Game show contests. Sliders while watching the preso. Watch a virus being constructed. Whack a something games. Small car racing.

For lack of a better term – “Trade show hostesses”. One booth had male and female pirates. Blue wigs. Spangled short dresses. Shoes that look way too high to wear. Bay Watch type hostesses. These were the “can we scan your badge?” for hire people.

RSA attendees. Pay a buck. Buy the twice-monthly Street Sheet from the street person who walks up with the paper. He/she gets to keep the money.

Parties – Put on by both larger and smaller companies. “W” is still the place to meet. Voltage Security event at Fang’s. Packed. Great food and martinis.

Palo Alto Network event at Jillian’s. Packed. Ronnie Lott, former 49er great there to take pictures with.

Ruby Skye event sponsored by CA. Lighter in attendance. Dancers with neon hula-hoops and on stilts were interesting. As was the juggler.

SC Magazine Awards 2011 (US) winners are being announced Tuesday night. The Info Security Products Guide 2011 Global Product Excellence awards will be given out the evening of February 16.

Thursday, February 10, 2011

Anti-Malware Testing Standards Organization Meeting In California

World. For a couple of days, San Mateo, California will be known for something more than the city where Boston Patriot quarterback Tom Brady played high school football and where the horse Seabiscuit raced during the 1930’s Depression. The Anti-Malware Testing Standards Organization is having one of their annual meetings in San Mateo the week of February 8th. Of course, next week is the RSA 2011 Conference in San Francisco http://www.rsaconference.com/2011/usa/

We’re talking about a bunch of really bright people. The smartest men and women in the room. People who get voted off the island for being too bright for the others. Much smarter than a 5th grader.

The Anti-Malware Testing Standards Organization (AMTSO) is a three year old international non-profit association that focuses on the addressing the global need for improvement in the objectivity, quality and relevance of anti-malware testing methodologies. AMTSO membership is open to academics, reviewers, publications, testers and vendors, subject to guidelines determined by AMTSO.

The wisdom of crowds (unless it’s the right crowd) does not guarantee arriving at the best solution. Would you rather rely on the advice of a surgeon, team of surgeons, or 200k Facebook fans clicking or not clicking "like" and adding comments to provide the best course of action for a procedure? The third alternative is quite scary. I would go with the experts with respect to suggesting security test guidelines.

Close to 40 different organizations (the vast majority being global security and test organizations) are members. These include Trend Micro, ESET, AVG Technologies, AV-Comparatives, Virus Bulletin, Avast, Symantec, to name a few.

Many resources are available for free for anyone to download http://www.amtso.org/documents.html . Any organization or publication doing testing, at minimum, should at least be familiar with AMTSO’s (free) document “Anti-Malware Testing Standards Organization. The Fundamental Principles of Testing”. These principles aren’t rocket science, but you see them being violated all the time. There are a number of other articles, doing various depths of technical deep dives. Statistically valid tests, anyone ;) ?

Individuals can rely on the proverbial “like” clicks on Fan Pages for testing advice. However, that’s probably a suboptimal solution.

The Anti-Malware Testing Standards Organization web site is at www.amtso.org For membership information, go to http://www.amtso.org/membership.html