Unknown Ransomware Test

wheatfoxrabbit

Hi,

The PC Security Channel has once again conducted an Unknown Ransomware test, where Bitdefender did well. Remarkable!

https://youtu.be/3co-80OeHQE?si=pZM0i-rWEpGjSHCp

Flexx

https://community.bitdefender.com/en/discussion/101856/unknown-ransomware-test

This test has been discussed across various forums on the web, and Bitdefender secured 100% results in stopping ransomware from encrypting files. The test primarily focused on behavior blocking across various antimalware vendors (in Bitdefender's case, behavior blocking is referred to as Advanced Threat Defense) as well as cloud-based capabilities, which utilize sandboxing to run specific files in the cloud within an isolated environment to determine if they are malicious. It’s also important to note that the method used in the test was limited to a particular folder (in this case, the image folder) rather than the entire system.

Regards

wheatfoxrabbit

@Flexx

Bitdefender Endpoint Security Tools was used in this test. Does it offer the same level of functionality as Total Security? Does it also offer the same level of protection?

Flexx

https://community.bitdefender.com/en/discussion/comment/345257#Comment_345257

At a basic level, both offer the same level of protection. However, business/endpoint products are designed for organizations that are more vulnerable to attacks. Consequently, malware researchers create specific signatures for business/enterprise products that are not available for home products. Additionally, business/enterprise products have more technologies compared to home products because they are targeted more by hackers.

I am providing this feedback because I have asked this question many times in the past to support, malware researchers, and even to @Alexandru_BD

Perhaps @Alexandru_BD can help provide you with brief information on this.

Regards

Alexandru_BD

Hello,

@Flexx if you are refering (again) to the differences between home user solutions and enterprise security, I believe myself and the security researchers have answered this as many times as you've asked, so here i'll answer to @wheatfoxrabbit and provide some "brief" information. 😄

First, thank you for sharing the video with us and for your appreciation. 😉👍️

For starters, the business and the consumer landscapes are different both in terms of threats and protection technologies. For instance, enterprise setups normally have hundreds of endpoints and servers running EDR sensors that record and aggregate suspicious activity at the organization level. This additional visibility into the organization can help business products better understand the context and potentially trigger a detection. Other detections pertain to attacks against technologies that are not normally part of a home (i.e. Active Directory).

Actually, the anti-malware engines (and their capabilities) in the consumer and business products are identical. Business products have additional technologies that help companies tailor certain security aspects that match a specific threat model or a specific industry compliance requirement. Unlike homes, companies have a significant larger attack surface (multiple OS, mix and match of physical, virtualized or cloud endpoints, external [targeted] and internal threats and so on) that requires constant monitoring and intervention. In contrast, home products should work out of the box, with no additional supervision or tuning. Business technologies such as EDR and tunable machine learning models would be extremely difficult to manage and configure for a home administrator.

The differences are not because companies are more vulnerable to attacks, a hack can happen to anyone, but companies are a popular target because of the amount of specific data and sensitive information they hold, and having these fall into the wrong hands would have devastating consequences for both the company and its customers and partners. Organizations handle sensitive corporate data, intellectual property, customer data, and financial records, so they must also comply with regulations like GDPR, HIPAA, or PCI-DSS, which impose strict security and reporting requirements.

Enterprise environments face more sophisticated and targeted attacks, such as advanced persistent threats, insider threats, and attacks aimed at sensitive corporate data or intellectual property. Home solutions are usually designed for a few devices, while enterprise solutions must manage hundreds or thousands of devices across various locations. They often include centralized management consoles that allow IT administrators to monitor and manage security across the entire organization. Furthermore, most consumer antivirus solutions are simple to install and require little technical expertise. They run in the background with minimal user input. On the other hand, business security solutions must offer advanced controls, such as policy enforcement, role-based access, and remote management. IT teams can define security policies, deploy updates, and monitor incidents across the entire network. With advanced threat detection and response, security information and event management, a business security also allows for real-time incident response, forensic analysis, and active threat hunting.

There's also the matter of scalability, because consumer products are relatively standardized, with some customization options of course, and updates delivered automatically. An organization grows and develops specific needs, therefore a security solution must scale across large networks and offer extensive customization options. These might include integration with existing IT infrastructure, custom reporting, or tailored threat intelligence feeds. And the list goes on, really..

But this doesn't mean that home solutions are less effective, or that their protection is weaker. It's more about the usage and security requirements. The antivirus solutions for home use focus on simplicity, automation, and affordability for individual users, while business security solutions prioritize scalability, customization, advanced threat detection, and centralized management to protect complex business environments.

I hope the information is insightful.

Regards,

Alex

wheatfoxrabbit

wow…. Thanks for the detailed explanation @Alexandru_BD

Flexx

@Flexx if you are refering (again) to the differences between home user solutions and enterprise security, I believe myself and the security researchers have answered this as many times as you've asked

@Alexandru_BD, I know, that's why I mentioned to the user that I am providing this feedback because I have asked this question many times in the past to support, malware researchers, and even to you.

Regards