matousec.com (site map)

Poll

On Windows 7 (or Vista) I use

  unlimited administrator's account (58.1%)

  limited administrator's account (16.49%)

  common user's account (13.65%)

  nothing (I do not use Win 7/Vista) (14.05%)

more

results

Security Software Testing Suite 64

About the suite

Security Software Testing Suite 64 (SSTS64) is a set of tools used for testing Windows security software that implement application-based security model and behavior control – i.e. most of the Internet security suites, HIPS, personal firewalls, behavior blockers etc. SSTS64 is based on the idea of independent programs that attempt to bypass various features of the security software. Each test of SSTS64 is directed against a single feature or against a few closely connected features of the security software.

SSTS64 is a replacement of former Security Software Testing Suite, (SSTS) which was developed for the original Proactive Security Challenge project that tested security products on 32-bit Windows XP platform. SSTS64 is designed for 64-bit Windows 7 platform. The basic concept of SSTS64 is based on Security Software Testing Suite, but the code was completely redesigned. Many of the tests were improved, many were removed due to incompatibility with 64-bit or Windows 7 platform; some of the very similar techniques originally spread in more than one test were joined into a single test that implements more than one technique. Some tests or techniques are completely new. The whole suite was rewritten to provide full Unicode support.

SSTS64 is used in our Proactive Security Challenge 64 project, which goal is to rate and compare abilities of security software on 64-bit Windows. SSTS64 is published with its source code, which makes the testing as transparent as possible. The suite contains many kinds of tests like outbound protection tests, self-defense tests, keylogger tests etc. The tests in SSTS64 have a unified structure and user interface, hence using it is fast, easy and efficient.

Changelog

Download

Warning: This software is used for testing of security products and should never be used on production machines. Using this software may damage or erase your data. This software is provided "as is" and without warranty of any kind. More information about each test can be found in its source code file and in the shared source code files of the whole suite.

By using SSTS64 you agree with its licence that is included in the archive in licence.txt.

Download SSTS64. The archive is password protected. The password is "ssts64".

Building SSTS64

If you have problems with building SSTS64 please read notes in compile.txt that is included in the archive.

Contribution

If you are a security researcher, analyst or coder and you have an idea for a test, please share it with us. You can either send us a description of your idea, a proof of concept or a fully integrated test to the SSTS64 framework. We will analyse it and possibly include to the suite giving you a full credit for the new testing method. If you have such idea, please contact us.

System requirements

SSTS64 is designed for 64-bit Windows 7 Service Pack 1 with Internet Explorer 9. Various tests may be compatible with other Windows versions and browsers too, but the functionality is not guaranteed there.

Commercial or business related usage

SSTS64 is distributed free of charge for private noncommercial use only. For the full licence information, read licence.txt file of the SSTS64 archive. For using SSTS64 for commercial or business related purposes or for the purpose of creating content of a publicly accessible web site or for extensive or mass software testing, you have to buy a licence and can not use SSTS64 for free and/or distribute it on the web site. Please contact our sales department to get more information.