Twister fails in VB100%, again(Aug,2009,window xp)

discussions about Twister Anti-TrojanVirus
Post Reply
ftfans
Site Admin
Posts: 108
Joined: Sun Jan 18, 2009 12:18 am

Twister fails in VB100%, again(Aug,2009,window xp)

Post by ftfans » Tue Aug 04, 2009 12:28 am

feier_bayue.jpg
feier_bayue.jpg (25.16 KiB) Viewed 8139 times
2612 misses, 38 false positive, the OS is windows vista sp2.
This is the second time Twister enter this VB100% test, the first time: viewtopic.php?f=2&t=56
Hope that it will pass next time, though it seems not so possible.

The overview of this test: http://www.virusbtn.com/vb100/archive/2009/08
I am not officer from Filseclab, LOL

Tony
Posts: 44
Joined: Sun Jan 18, 2009 11:12 am
when: 2008
Location: Cumbria, England

Re: Twister fails in VB100%, again(Aug,2009,window xp)

Post by Tony » Tue Aug 04, 2009 8:34 am

2612 misses, 38 false positive is a huge increase compared to the previous test.
Filsclab are going to have to do better if they want their new version to be a success when it is released.

Has this been posted in the Chinese forum?
If so what is there responce to this test.
Lets Twist again, like we did last summer.

bruce
Posts: 6
Joined: Mon Jan 19, 2009 1:50 am

Re: Twister fails in VB100%, again(Aug,2009,window xp)

Post by bruce » Thu Aug 06, 2009 12:39 am

Hi Tony, i saw the Chinese Forum, and Filseclab developer gave the following response:

“这次费尔的VB100测试成绩确实不太好,不过我们不会放弃,毕竟这个挑战对于许多防毒软件厂商来讲都是很大并需要勇气的。失败再所难免,我们做好了充分的心理准备,会总结每次失败经验并继续勇于尝试,争取将来获得好成绩,谢谢。”

English translation(just for your reference):This time Twister did not do well in the VB100 test, however, we will not give up, after all, this test is a big challenge for many anti-virus software vendors, and it takes courage to join the test. Setbacks are inevitable, we are totally prepared, and learn from each failure as well as experience, and will bravely face the test in future to get a better result, thanks."

Tony
Posts: 44
Joined: Sun Jan 18, 2009 11:12 am
when: 2008
Location: Cumbria, England

Re: Twister fails in VB100%, again(Aug,2009,window xp)

Post by Tony » Thu Aug 06, 2009 8:29 am

Thanks Bruce :)

This was a big step forward for Filsclab by putting Twister forward for the VB100% test and that is a positive responce they are giving to putting things right, which they will have to do if they want Twister to be a global success.
At least Filsclab are not making excuses for their dismal performance.
Lets Twist again, like we did last summer.

User avatar
3DFireStarteR
Posts: 53
Joined: Sun Jan 18, 2009 2:27 pm

Re: Twister fails in VB100%, again(Aug,2009,window xp)

Post by 3DFireStarteR » Fri Aug 07, 2009 10:52 pm

(Mcafee would be like) - This test is fake no way..... false test cant be right we are the best i want out of this test because testing standards are not correct.

I like Filseclabs open and respectfull responce :) no BS. haha

renegade
Posts: 69
Joined: Sun Jan 18, 2009 2:33 pm

Re: Twister fails in VB100%, again(Aug,2009,window xp)

Post by renegade » Thu Aug 13, 2009 4:00 am


Fuzzfas
Posts: 58
Joined: Sun Jan 18, 2009 10:40 am

Re: Twister fails in VB100%, again(Aug,2009,window xp)

Post by Fuzzfas » Fri Sep 04, 2009 3:11 pm

I guess this performance was as bad as it can get. I am also more and more convinced that Twister lacks "western" samples. They must work on that. I can't believe that CA or Quick Heal or Blink are so much better. Probably they are better "networked" with other vendors in exchanging western malware samples.

renegade
Posts: 69
Joined: Sun Jan 18, 2009 2:33 pm

Re: Twister fails in VB100%, again(Aug,2009,window xp)

Post by renegade » Sat Aug 14, 2010 6:24 pm

Thread was updated with review.

VB100 August 2009 - on Windows Vista Business Edition SP2 x32

2009-08-01

Filseclab Twister AntiTrojanVirus 7.3.2.9971

The somewhat oddly named Filseclab’s somewhat oddly named Twister AntiTrojanVirus makes its second appearance in the VB100, having impressed last time around with its slick presentation and stable operation if not with its detection rates. This time once again the install process was fast and smooth, although the UAC system presented some serious warnings about unknown and untrusted publishers. The main interface is clear and lucid, with a user-friendly and attractive design.

Once again the on-demand mode proved fast and stable, while the on-access mode presented something which we would later find to be a recurring issue in this test: the inability to block access to infected files. Twister is designed primarily as a behavioural and HIPS product, intended to monitor executing programs for malicious behaviour, with the standard anti-virus-style file access hooking added later than much of the product. In this case the on-access detection seems only to log attempts to access files, doing nothing to prevent them from being accessed. The logging proved reliable however, and speeds were decent in both modes, although as the on-access module was not actually preventing access, the speed measurement may not be strictly comparable with other products. Detection rates were also fairly decent, at least in the less recent items in the standard sets, although handling of polymorphic viruses was less than impressive. In the RAP sets detection rates were somewhat below par but at least even and regular. The WildList was not fully covered, with fairly minimal coverage of the Virut variant included there, and in the clean sets a number of false positives turned up, denying Filseclab a VB100 award this time, but still looking a promising prospect.


ItW: 91.45%
ItW (o/a): 91.45%
Trojans: 77.69%
Worms & bots: 84.02%
Polymorphic: 28.93%
False positives: 38

Post Reply