top of page

Guide to businesses for selecting Anti virus vendors


To effectively compare two antivirus (AV) solutions many comparison criteria's should be considered


Key Comparison Criteria


Product based requirement criteria

  1. Detection Rates

  2. False Positive Rates

  3. Performance Impact

  4. Features and Functionality



Evaluate how well each solution detects known and unknown malware. Look for independent test results from organizations like AV-TEST or AV-Comparatives that provide detection percentages and effectiveness against various types of malware.


Assess how often each solution incorrectly identifies safe files as threats. A lower false positive rate is crucial for minimizing disruptions to users.


Examine how each antivirus solution affects system performance. This includes resource usage during scans and overall impact on system speed during regular operations.

Compare the additional features offered, such as:

  • Real-time protection

  • Firewall capabilities

  • VPN services

  • Identity theft protection

  • System optimization tools


Market Comparison requirement criteria


  1. User Experience

  2. Pricing and Licensing

  3. Support and Updates

  4. Reputation and Reviews



Anti-Malware Testing Standards Organization (AMTSO)


The Anti-Malware Testing Standards Organization (AMTSO) is a global consortium focused on improving the standards of anti-malware testing. It was established to address the need for reliable and consistent testing methodologies in the cybersecurity industry.


Objectives and Activities

AMTSO aims to:

  1. Develop Best Practices: Create guidelines for testing methodologies to ensure fairness, transparency, and reproducibility in anti-malware product evaluations.

  2. Promote Collaboration: Foster communication between antivirus vendors, testing laboratories, and end-users to enhance the overall quality of anti-malware solutions.

  3. Educate Stakeholders: Provide resources and knowledge sharing to help stakeholders understand the complexities of malware detection and testing methodologies.


AMTSO's work is crucial as it helps standardize how anti-malware products are evaluated, ensuring that consumers can make informed decisions based on credible testing results. By promoting high standards in testing practices, AMTSO contributes to improving the effectiveness of cybersecurity solutions in combating evolving threats.



The VB100 certification is a prestigious recognition awarded by Virus Bulletin, an independent testing organization based in the UK. This certification evaluates the efficacy of Windows endpoint security products, specifically their ability to detect and block common malware threats while minimizing false positives.


Certification
virus bulletin check

Testing Criteria

To achieve VB100 certification, a product must meet stringent criteria:

Detection Rate: It must detect at least 99.5% of malware samples categorized as "In the Wild" by the Wild List Organization.

False Positive Rate: The product must generate no more than 0.01% false positives when scanning a set of legitimate files.



Criteria

Av solution 1

Av solution 2

Detection Rate

High (100% in MITRE evaluations)

High but variable in some tests

False Positive Rate

Low

Moderate

Performance Impact

Minimal

Moderate

Key Features

EDR, threat intelligence

AI-driven protection, rollback

User Experience

Intuitive interface

Complex setup

Pricing

Premium pricing

Competitive

Support

Strong support

Good support


The testing process involves downloading malware samples and performing on-demand scans, followed by a verification of any remaining samples to ensure integrity. This rigorous methodology ensures that only the most reliable products receive certification.


Importance in Industry

VB100 certification is widely respected in the cybersecurity community. It serves as a benchmark for assessing the quality and effectiveness of anti-malware solutions. Products that earn this certification demonstrate a strong capability to protect against prevalent threats while reducing alert fatigue for users. This recognition helps enterprises comply with security regulations and enhances their overall security posture.



Comments


bottom of page