水星资讯：COMODO总裁Melih关于反病毒产品测评的一些个人看法

lanvin

原文地址： http://www.melih.com/2008/09/13/service-to-human-race-or-fame-seeking-selfishness/

Service to human race or fame seeking selfishness?
And this is directed at anyone who claims to be testing Anti Virus products!

Somebody asked me once:
Hey Melih, how many percent of the viruses do your Anti Virus product detect?
My answer was:
100% of the ones we know of! If we have the malware then we simply create a signature for it and update our db!

So all this AV testing means is that the AV tester “might” have malware that the AV provider doesn’t. (I say “might” because noone can validate if they actually have real malware or not either!)

Actually there is no single entity that exists that can claim to have all the malware out there. All these companies, individuals, AV testers have only a subset of all the malware out there!

So what service is this AV Testers providing to end users, apart from saying, Ha Ha, look I have something you don’t to AV companies and claiming this is a test?

Wouldn’t these AV testers be helping the users more if they provided all the malware they know of to AV companies so that they all can start protecting their users better? Are they choosing fame over user security?

Wouldn’t it be better to provide all the malware they have to all AV companies and then test those AV products to see if have the “capability” to detect and remove those malware? Or test the speed of AV companies from being aware of a virus to detection?
Isn’t this like saying: Na, na na naaaa, I know a burglar in my street that you don’t Mr Police!? Why are you not protecting your neighbours by providing the details AV testers?

Ask yourselves AV Testers: Are users really benefiting from your actions? Or would they benefit better if you provided all your malware samples to Anti Virus companies let them detect all these malware you provided and then do a test to see which AVs don’t!
I urge all AV Testing organisations to adopt new and better ways to serve the users better!

Melih



为了方便大家阅读  我稍微排版了下，文章里面好多地方不好翻译，我就不翻译了，大家自己看吧，最后祝大家中秋节快乐！

番茄

感谢水星兄弟  苹果、贝哥、好弟弟、晖哥、虾米、叶子的支持


[ 本帖最后由 lanvin 于 2008-9-14 01:48 编辑 ]

无尽藏海

额……E文看着费劲……

lanvin

原帖由 无尽藏海 于 2008-9-14 01:47 发表
额……E文看着费劲……

谢谢藏海给人气值

PlayWill

躺了半天睡不着

lanvin

原帖由 PlayWill 于 2008-9-14 01:52 发表
躺了半天睡不着

失眠了？
这几天我要写一些东西
好弟弟到时候不要吝啬散财

PlayWill

质量不错的话
那当然了

lanvin

原帖由 PlayWill 于 2008-9-14 01:57 发表
质量不错的话
那当然了

放心 质量太次  我也不想丢人现眼
给个人气值就行

[ 本帖最后由 lanvin 于 2008-9-14 02:08 编辑 ]

will

服务人类还是中饱私囊？
——此文针对于那些声称测试反病毒产品的人

有人曾问过我：
嘿，Melin，你们的反病毒产品能侦测几成的病毒？
我的回答是：
百分之百我们所知道的病毒！一旦我们拥有病毒样本我们则会提取特称码然后更新病毒库。

所以所有所谓的反病毒产品测试仅仅意味着测试者可能拥有反病毒厂商没有的样本。（我说“可能”是因为没有人能验证他们是否真的拥有这些病毒。）

事实上拥有所有恶意软件的单一反病毒实体是不存在的。所有的反病毒公司、独立的实验室以及反病毒测试者都只是拥有所有存在的恶意软件的子集。

那么，除了说：“哈哈，我有你们这些反病毒厂商所没有的东西”，并声称这是所谓的测试外，反病毒产品测试者提供给最终用户的服务是什么？

难道他们不应该把他们所拥有的恶意软件样本提供给所有的反病毒厂商以便最终用户能得到更好的保护？他们是不是将名利看得比用户安全更甚？

如果事先把所有样本提供给所有的反病毒厂商，然后再测试这些反病毒产品检出和清除这些恶意软件的能力，这样难道不更合理吗？或者是测试反病毒厂商对于新病毒的反应速度？

难道这不好像就是说：啦啦啦，我知道街上有一个窃贼，但你不是警察先生。为什么你不向你的邻居提供窃贼的细节来保护他们，反病毒产品测试者们？

请反病毒产品测试者们扪心自问：用户是否真正能受益于你们的行为？或许这样他们（指用户）能从中受益如果你们提供所有的样本，然后来测试哪些反病毒产品不能检出所有你们所提供的样本？

我强烈要求所有的反病毒测试机构采取新的和更好方法来更好的服务于用户。

Melih

[ 本帖最后由 will 于 2008-9-14 02:33 编辑 ]

SW-27

感谢Will呵~~~

虽然英文看得懂……

zwl2828

说的很好！测试机构的确应该想想了。