Careful! Antivirus programs fail to detect 70% of new viruses

According to a report by the Security Company Damballa, targeting the Q4-2014 range, the effectiveness of the products antivirus as a way of preventing Malware infections It is very low, when it comes to new threats.

Thus, in the first hour after reporting, the new forms of malware remain undetected in about 70% of cases. More than that, following the processes of scan done successively to identify new signatures malware, the detection rate is only 66% in the first 24 hours and 72% at one week after reporting. In terms of reaching the total detection rate, 100%, it seems that antivirus producers need almost 6 months to create the necessary signatures to identify new forms of malware, during which the infection can propagate free on the assumed systems as protected.

The report also shows the importance of automating manual verification processes, respectively diminishing situations of False-positive detection, facilitating the use of qualified personnel resources. In support of reducing the effort, Damballa recommends that security teams use tools to detect real infections, capable of reaching at least the statistical limits for the detection of positive cases of infection. At the same time, reliable integration between detection and response systems is necessary, as well as security rules that allow the application of automatic responses to threats with sufficient degree.