Comments on: False Positives: A Round of Applause… http://blog.eset.com/2009/10/30/false-positives-a-round-of-applause Sun, 12 Feb 2012 22:29:08 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: David Harley http://blog.eset.com/2009/10/30/false-positives-a-round-of-applause/comment-page-1#comment-68604 David Harley Mon, 02 Nov 2009 13:56:00 +0000 http://www.eset.com/threat-center/blog/?p=1966#comment-68604 We are watching you. Be afraid, be very afraid. :-D Actual figures aside, your essential point is very well taken. And yes, I've been following your blog for a while, and intend to continue: you blog some pretty interesting stuff. We are watching you. Be afraid, be very afraid. :-D

Actual figures aside, your essential point is very well taken. And yes, I’ve been following your blog for a while, and intend to continue: you blog some pretty interesting stuff.

]]> By: Cd-MaN http://blog.eset.com/2009/10/30/false-positives-a-round-of-applause/comment-page-1#comment-68602 Cd-MaN Mon, 02 Nov 2009 13:44:59 +0000 http://www.eset.com/threat-center/blog/?p=1966#comment-68602 Thank you for continuing to read my blog. It is both an encouraging and a slightly frightening situation :-) You of course were 100% right, I was comparing apples to oranges. I've update the post to reflect the criticism and came up with a new number, which is completely pulled out of my rear :-) The argument goes as follows: the Bit9 Global Software Registry claims to have more than 6 000 000 000 files. If we consider that they have "all" the clean executables (which of course they don't, but lets suppose it for the moment) and AV-Comparatives uses 0.5% of them for FP testing, 20 files still weigh in at just 0.003%. I hope that I managed to drive home the idea that current "AV" solutions have a very low FP rate, which inspires trust in users (popping up frequently and claiming to have found malware in applications which the user is convinced is clean can very quickly erode the trust in a product!). Thank you again and I hope that you will continue to follow my blog. Thank you for continuing to read my blog. It is both an encouraging and a slightly frightening situation :-)

You of course were 100% right, I was comparing apples to oranges. I’ve update the post to reflect the criticism and came up with a new number, which is completely pulled out of my rear :-) The argument goes as follows: the Bit9 Global Software Registry claims to have more than 6 000 000 000 files. If we consider that they have “all” the clean executables (which of course they don’t, but lets suppose it for the moment) and AV-Comparatives uses 0.5% of them for FP testing, 20 files still weigh in at just 0.003%.

I hope that I managed to drive home the idea that current “AV” solutions have a very low FP rate, which inspires trust in users (popping up frequently and claiming to have found malware in applications which the user is convinced is clean can very quickly erode the trust in a product!).

Thank you again and I hope that you will continue to follow my blog.

]]>