Poor heuristics

Norton Security | Norton Internet Security
1

Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.

2

You need to rethink your comment and use common sense. Go to Av-Comparatives.org/ then click on comparatives tab on the left and then click on May 2008 online results.

3

I'm trying to help people who are reading your message.

 

The URL in your message, which is an active link, when clicked on actually goes to: 

http://www.av-comparatives.org/seiten/ergebnisse_2008_05.php  

whcih produces the error message I posted.

 

There is absolutely no need to be rude in reply when the website says: 

Please link only to our main site www.av-comparatives.org and not to the Online Results.

Message Edited by huwyngr on 06-03-2008 12:53 PM
4

Great and thanks for the help, but you could have corrected it in your first response-right?

 

I am aware of what the site says as far as proper links are concerned, and I attempted to paste a url for the main page-  but it was not correct.

5

I'm sure neither of you intended any rude comments; please keep in mind that any joking or sarcasm is difficult to convey or read in a forum post.

 

As to the data on the site, that is very interesting. Thank you for sharing this information, I know our teams are very interested in this type of testing. 

6

Although I like NIS2008, in the latest AV-Comparatives Retrospect/Proactive test (only 18% detection on unseen sample set) reveals fairly poor heuristics important for zero day exploits, etc. I would like to see this percentage a lot higher- on the same scale as NOD32 or Avira before I have complete confidence in the software. Just my opinion.

 

http://www.av-comparatives.org

Message Edited by BunkhouseBuck1 on 06-03-2008 07:36 AM
Message Edited by BunkhouseBuck1 on 06-03-2008 08:32 AM
Message Edited by BunkhouseBuck1 on 06-03-2008 08:33 AM
1 Like
7

Symantec has acquired heuristic based technologies in the past and plans to employ "whitelisting" as well as other proprietary methods (see link below). That said, testing in the recent past and most current tests do not show an efficacious level of heuristic based detection (non-signature based) at this time. Perhaps there will be improvement in the future.

 

http://www.zdnetasia.com/news/security/0,39044215,62025159,00.htm
Message Edited by BunkhouseBuck1 on 06-03-2008 12:07 PM
Message Edited by BunkhouseBuck1 on 06-03-2008 12:08 PM
8

footnote on page 5 of the report: “a preview of Symantec’s improved technology (not yet publicly available) scored ~41%”

9

Good, but that still means it missed (even with Symantec's improved technology) 59% of the malware samples thrown at it. Avira already detects 72 and 81% of the samples from the last two Retrospective/Proactive tests.

 

Are you the same IBK at Wilder's Security Forum? I am the same Bunkhouse Buck.

Message Edited by BunkhouseBuck1 on 06-03-2008 01:34 PM
Message Edited by BunkhouseBuck1 on 06-03-2008 01:36 PM
Message Edited by BunkhouseBuck1 on 06-03-2008 01:37 PM
10

so what?

you want that Symantec improves its heuristic to beat all others and you see that they are already working on it.

yes, the same IBK, I follow you in all forums where you post ;) 

11

Follow me? My opinion of you just increased. :slight_smile:

12

Hey BB and IBK! :D

 

Thanks for the info, IBK :)

13
Midway64 wrote:

Hey BB and IBK! :D

 

Thanks for the info, IBK :)

Indeed. Norton is not that bad . :manwink:

 

And indeed good to see your here, IBK

14
IBK wrote:
footnote on page 5 of the report: "a preview of Symantec's improved technology (not yet publicly available) scored ~41%"

 

Sounds promising, looking forward to NIS 2009 :)

 

 

Cheers

15

I think you need to rethink your link:

 

Error 404 - File not found

The requested file could not be found.

Please ensure that you are trying to access the correct URL. Only links to our main site are allowed.