Abstract:

To objectively and scientifically evaluate the anti-malware technology and products, international anti-virus test agencies always continue to study and update the testing standards and methods, which is gradually from static test to real time test. However, there are different opinions between security vendors and test agencies, and even conflict. It restricts the international process of China’s information security products. In order to realize the Internet power strategy, it is urgent to speed up the construction of the Chinese standard and the Chinese evaluation. This paper studied the testing criteria and methodology of anti-malware testing organization in the world, and analyzed these issues between testing criteria and Internet security threats, anti-malware technologies. It proposed a new guideline of anti-malware products and service test evaluation system based on Internet online testing environment and real security threat case. The anti-malware comparison test mode was continuous, synchronized with the performance and a false positive test. At the same time, the paper analyzed and presented the key problem in the construction of evaluation system.

Key words: malware, real time test, evaluation system, testing standards