★★☆→金山毒霸2012参加VB100测试“是/非”观

苏鹤

悟心之道 发表于 2012-1-28 12:56
本地就系统防御K+，VB100也测不了。

据我所知VB100测试的病毒就是在网上肆虐有一阵子的样本 这点 单单用本地也应该能查出来吧

悟心之道

释然的心 发表于 2012-1-28 12:54
金山只有有能拿出手的，本地引擎，配合强大的云，才能真正的傲然于世的~

有强的本地主动防御+云其实也比较NB了，主动防御VB１００是不会测试的

悟心之道

苏鹤 发表于 2012-1-28 12:57
据我所知VB100测试的病毒就是在网上肆虐有一阵子的样本 这点 单单用本地也应该能查出来吧

VB100测试的应该都是“本地扫描”，所以类似微点主动防御软件，HIPS之类都无从测试。

苏鹤

悟心之道 发表于 2012-1-28 13:04
VB100测试的应该都是“本地扫描”，所以类似微点主动防御软件，HIPS之类都无从测试。

嗯 我也没说测别的 我就想说 既然都已经肆虐很久的病毒样本 按理说 金山这样的就算本地也应该可以杀掉吧 不接触云或者HIPS

释然的心

悟心之道 发表于 2012-1-28 12:57
有强的本地主动防御+云其实也比较NB了，主动防御VB１００是不会测试的

嗯，金山能把主防做成熟，做好了，配合云也也是很强大的。
金山的k+也是基于云的~总感觉云的局限性，还是比较多的，单奔云的话，心里不那么踏实。
感觉金山在本地方面要做的还是挺多的，
VB100，只是单方面的查杀测试，对于软件安全性方面并不是太绝对的指导意义。毕竟杀软的侧重点不同，有的重查杀，有的重防御。并不见没过VB100，安全性就差。


金山要把可牛的卡巴引擎整合到毒霸里面作为本地引擎就好了，本地能力会有很大的提升的。虽说占用可能会大很多

悟心之道

苏鹤 发表于 2012-1-28 13:07
嗯 我也没说测别的 我就想说 既然都已经肆虐很久的病毒样本 按理说 金山这样的就算本地也应该可以杀掉吧  ...

金山就没本地库，不联网还杀什么杀啊？
（不光是以前流行过和样本）
Procedures

The RAP tests are run according to the following procedures:

RAP samples are split into four sets. The set known as 'week +1' is gathered in the period from one to seven days after the product submission deadline. The 'week -1' set covers the deadline day itself and the six previous days. The 'week -2' set includes samples gathered eight to 14 days before the deadline, and the 'week -3' set consists of samples gathered 15 to 21 days before the deadline.

All samples are counted as dating from the point at which they are first seen by the Virus Bulletin test lab processing systems, or the date label of the batch with which they were received, whichever is earlier. Sample sources are not considered when compiling sets.

Samples are validated using our standard lab protocols, and classified to exclude certain inappropriate sample types. These include adware and other items considered 'potentially unwanted' by some products, partial samples requiring other components to operate, and original samples of true viruses received from external sources. Self-replicating viruses are replicated in-house and only new replications are considered for inclusion in the RAP sets.

Samples are rated by prevalence and significance as accurately as possible, using prevalence data from a wide range of sources. Sets are weighted to remove the least prevalent items. Scores are also weighted to minimise the impact of large quantities of similar items - for example, large batches of server-side morphed trojans and replicated true viruses are given a lower weighting than one-off unique items.

For each product entered for a review, we measure detection using our standard on-demand scanning procedure; this uses default product settings and ignores detections labelled as 'suspicious' only. Scores used in the per-test RAP quadrants are labelled 'Proactive' (the 'week +1' score) and 'Reactive' (the average of the scores for weeks -1, -2 and -3). Scores used in the four-test RAP averages quadrant are the averages of each score over the last four tests.

In the per-test quadrants, products with false positives in the test in question are marked by striking through the product identifier. For the four-test RAP averages quadrant, such scores are excluded when calcuating averages.

Product identifiers on quadrant charts may be simplified or abbreviated to keep the chart readable.）
http://www.virusbtn.com/vb100/rap-index.xml

苏鹤

悟心之道 发表于 2012-1-28 13:11
金山就没本地库，不联网还杀什么杀啊？
（不光是以前流行过和样本）
Procedures

本地库木有啊 唉。。。为何本地做得这么差呢

xuszdta

什么国际测试 都是浮云。

悟心之道

苏鹤 发表于 2012-1-28 13:13
本地库木有啊 唉。。。为何本地做得这么差呢

连数字3.0默认模式安装都没本地库。
山山推出10M+10S+10M，
数字就“刀锋式”，安装时就没本地病毒库了，要的选择下载。
装金山毒霸想要本地库，可选择所谓“黄金搭档”（金管组合）。

悟心之道

xuszdta 发表于 2012-1-28 14:15
什么国际测试 都是浮云。

AV-C测试相对来说更科学一些。