Antivirus? The German research institute for products προστασίας από ιούς AV-TEST πραγματοποίησε μια νέα σειρά δοκιμών για να καθορίσει τον τρόπο με τον οποίο οι suppliers antivirus software manage to protect its programs by analyzing the use of ASLR and DEP technologies, the use of signed files, and the use of HTTPS to deliver updates.
The results are not encouraging at all, as some of the developing companies have not yet managed to protect their own products using these technologies. Thus software with security gaps that can be used by attackers to take over one have been observed system.
Όσον αφορά τις τεχνολογίες ASLR (Randomization Layout Layout) και DEP (Data Execution Prevention), η AV-TEST αναφέρει ότι τα κορυφαία προϊόντα όπως Avira, Bitdefender, Kaspersky και Symantec, χρησιμοποιούν αυτές τις τεχνολογίες ασφαλείας "Χωρίς εξαίρεση", ενώ το AVG και το BullGuard είναι αρκετά κοντά με ένα σχεδόν τέλειο αποτέλεσμα.
"Άλλοι κατασκευαστές όπως οι Comodo, Emsisoft, Avast, McAfee, ThreatTrack, Quick Heal και K7 δεν χρησιμοποιούν την technology με συνέπεια. Τα ποσοστά τους κυμαίνονται μεταξύ 92,2 και 58,5%. Η Ahnlab, η οποία είχε το χαμηλότερο ποσοστό, διαθέτει το ASLR & DEP στο 36,3%," αναφέρει η AV-TEST.
With regard to signed files, not everyone seems to use this method. Signed files allow security products to recognize the developer of a particular application and check its integrity by determining whether malicious changes have occurred in a particular file.
And this time, top security suites like Bitdefender and Kaspersky use signed files, and in the case of Avira and AVG, they are not signed by 1 to 5 files or do not use valid certificates.
Finally, it seems that only 13 from 19 security products use HTTPS to distribute software and updates (Avira, Bitdefender, ESET and Kaspersky).
Worse, some of the antivirus vendors whose solutions have been tested by AV-TEST state that technologies such as ASLR and DEP can not be applied to their products.
"Some vendors informed the lab's experts after our latest tests that their products would never reach 100% because they used protection technologies that were incompatible with ASLR and DEP. However, the manufacturers do not want to disclose the technologies that they use", report from AV-TEST.
