matousec.com (site map)

Poll

Should software vendors reward independent researchers for finding vulnerabilities in their software?

  → Yes, by money and credit. (76.34%)

  → Yes, by credit only. (12.12%)

  → No. (8.28%)

  → Yes, by money only. (1.75%)

  → Other answer. (1.52%)

more

results

Proactive Security Challenge

Testing levels

Contents:

Back to contents

Level 9

The product has to score at least 50% in the tests on this level to pass it.

Back to contents

Tests


Crash7
Test type: Self-defense test
Scoring: At least one of the target processes or threads was crashed – 0%; Success – 100%.
Description: Crash7 checks whether malicious software can crash the tested product by allocating all the available memory in the system.

Driver Verifier
Test type: Other
Scoring: System crash – 0%; System unusable – 50%; Success – 100%.
Description: Driver Verifier is not a part of SSTS, it is Microsoft's tool used for drivers' verifications. With this tool we can check whether the tested product's drivers do not suffer from common problems that appear in kernel drivers. This tool should be used by the developers of Windows drivers to ensure the basic stability of their drivers. The tests are done with all options enabled.

FileAcc1
Test type: Self-defense test
Scoring: At least one of the tested product's processes or components is not loaded, is damaged, is limited to do its job, or does not work properly after the reboot – 0%; Success – 100%.
Description: FileAcc1 checks whether the tested product protects its files and directories against malicious manipulation of their security descriptors.

FileCtl1
Test type: Self-defense test
Scoring: At least one of the tested product's processes or components is not loaded, is damaged, is limited to do its job, or does not work properly after the reboot – 0%; Success – 100%.
Description: FileCtl1 checks whether the tested product protects its files against malicious erasing using the file system's special service control.

FileWri4
Test type: Self-defense test
Scoring: At least one of the tested product's processes or components is not loaded, is damaged, is limited to do its job, or does not work properly after the reboot – 0%; Success – 100%.
Description: FileWri4 checks whether the tested product protects its files against malicious corruption of their data using a direct disk access.

Back to contents

Result table

In the following table 100 represents the 100% result and 0 represents the 0% result. Other values are displayed as rounded whole numbers. The last two columns summarize the product's score on this level and whether it passed this level or not.


 
Product I. FileAcc1 – – ScoreResult
II. Driver Verifier II. FileWri4
III. Crash7 III. FileCtl1
III. II. I. III. II. -
Comodo IS 100 100 N/A N/A N/A – 100%PASSED
Jetico v2 0 100 N/A N/A N/A – 50%PASSED
KIS 0 100 N/A N/A N/A – 50%PASSED
Malware Defender 0 100 N/A N/A N/A – 50%PASSED
Netchina 0 0 N/A N/A N/A – 0%FAILED
OA Free 0 100 N/A N/A N/A – 50%PASSED
OA Premium 100 0 N/A N/A N/A – 50%PASSED
Outpost Free 0 100 N/A N/A N/A – 50%PASSED
Outpost Suite 0 0 N/A N/A N/A – 0%FAILED
PC Tools 100 100 N/A N/A N/A – 100%PASSED
Privatefirewall 0 100 N/A N/A N/A – 50%PASSED
ZoneAlarm Pro 0 0 N/A N/A N/A – 0%FAILED
Back to contents

Levels