Re: Linux anti-virus any good?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 11 July 2017 at 21:33, William <mattison.computer@xxxxxxxxx> wrote:
Good evening,

A few years ago, I found a web site "https://www.av-test.org" when trying to find comparisons of windows-7 anti-virus software.  I more recently re-visited that site, and found an article on Linux and anti-virus software for Linux.  It's here:
"https://www.av-test.org/en/news/news-single-view/linux-16-security-packages-against-windows-and-linux-malware-put-to-the-test/".

I have a few questions for this list:
1. How independent and objective is the group doing these tests, comparisons, and evaluations?  This is important for knowing just how much weight to give what they say.

The group may be independent and objective, but running tests with known malware samples is easy to do and not particularly helpful.  What is more important than %detection of some collection of known malware is the track record of
the vendor -- do they detect new variants of old malware?  How quickly do they distribute database updates?  Do the tests include 3rd party AV database updates (ClamAV has a number of 3rd party databases providers)?  A good reviewer
will consider more than just results from simple testing.
 
2. If you've had any experience with any of the anti-virus packages reported on in that article, especially those that received high scores for workstations, what is your review of that/those packages?

I use clamav (http://blog.clamav.net/2011/03/top-5-misconceptions-about-clamav.html) to scan shared drives that have files transferred from Windows.  Clamav has low %detection in the av-test.org table.  My employer deploys McAfee on Windows desktops.   ClamAV has detected malware in email attachments.    A colleague was at a high-level meeting including military brass where documents were being exchanged via a USB stick.    I expect most participants were using Windows laptops with name-brand commercial AV, but it was clamav running on my colleague's mac that detected a virus on the USB stick.  The virus may have used measures to hide its presence from Windows that weren't effective on macos.
 

I do see that this article is nearly 2 years old.  And I do realize that nothing gives me 100% protection or detection.

The more recent test of MacOS AV products may be more informative, particularly if you are dealing with files shared across platforms.  If you already have AV on Windows you might want to run something different on linux.  Malware developers
test against the mainstream AV software but probably ignore AV products that aren't commonly used on Windows.

Other testing organizations: https://www.av-comparatives.org https://www.icsalabs.com/ https://www.nsslabs.com/



--
George N. White III <aa056@xxxxxxxxxxxxxx>
Head of St. Margarets Bay, Nova Scotia
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux