Recently Microsoft Security Essentials (MSE), the antivirus provided by Microsoft and installed by default on Windows 8, failed to gain certification from AV-TEST, an organization that tests AV software based on specific criteria.

MSE got a 1.5/6.0 for protection, 3.5/6.0 for repair, and 5.5/6.0 for usability

In terms of protection, it seems to do really poorly. It actually does alright, but it’s 0day protection is terribly low – enough to pull the entire score down quite a lot.

But as you can see from other AVs, the higher the rate of 0day detection the higher the performance hit and the higher the number of false positives. Why? Because the heuristics engines run longer and are much more sensitive.

So it’s obvious that Microsoft is prioritizing removal and usability far above 0day detection. They absolutely excel in low false positives, whereas the highest rated AVs have quite a large number by comparison.

So what about 0day malware? Well, on Windows 8 where MSE is installed by default there’s a system wide SmartScreen, Microsoft’s reputation based filter for detecting 0day malware. Clearly they’re separating the security into components – MSE for removal and detection of known malware, and SmartScreen for detection of 0day malware.

So take the entire score into consideration, take the entire system into consideration, before deciding whether MSE is worth using.

Source:

http://www.av-test.org/en/tests/home-user/windows-7/sepoct-2012/



blog comments powered by Disqus

Published

01 December 2012

Category

security

Tags