[Information Security Magazine] Exposed tracta sobre els problemes dels programes antivirus i com aquests no ofereixen una protecció completa.
We found that many AV solutions are surprisingly easy to defeat, can't detect malware using alternative attack vectors and are difficult to manage. Strikingly, the capabilities and reliability of the products varied greatly.
In the two decades since the first viruses appeared, most AV vendors continue to push the same basic signature-based technology. Feature sets have been added and functionality improved, but the products haven't evolved as rapidly as the capabilities of viruses and worms.
For this reason, rather than simply testing the breadth and effectiveness of vendors' signature libraries, we focused on other critical--and often neglected--aspects of AV products: effectiveness against attack mechanisms designed to fool or disable AV protection; detection of increasingly popular forms of malware such as spyware and backdoors; and, in particular, enterprise-scale manageability.