Avlab.pl : Test of software for online banking protection(Feb 2019)

显示全部楼层 · 发表于 2019-3-19 01:59:22

https://avlab.pl/test-software-online-banking-protection

full pdf
https://avlab.pl/PDF_avlab/AVLab ... king-protection.pdf

显示全部楼层 · 发表于 2019-3-19 15:24:25

卡巴诺顿是真强毛豆和其他两个美国的也表现非常不错，感谢！提供参考！

显示全部楼层 · 发表于 2019-3-21 00:37:11

本帖最后由 Karna 于 2019-3-26 23:32 编辑

MITM Code Injecting Attack. The test verifies whether it’s possible to inject HTML and JavaScript code into websites.

MITM Password Sniffing Attack. The test verifies whether it’s possible to capture confidential information from websites which are secured by SSL certificate.

MITM HTTP , I mean I can understand. But SSL ? Won't the browser report the certificate error and shut down the connection ? Since we are talking about banking protection, I think we should assume the banks realize the importance of deploying HSTS on some sensitive pages so that SSLStrip won't be a problem. In any case, there isn't much that AVs can do with MITM. The result really confuses me.

显示全部楼层 · 发表于 2019-4-14 15:35:42

看着大多数都挺赏心悦目的，直到看到最后一个微软WD…………2/11

[杀软评测] Avlab.pl : Test of software for online banking protection(Feb 2019)