Google and Microsoft have teamed up to solve the problem of antivirus false positives.
VirusTotal online scanner announced the launch of the “trusted source” initiative. It will be aimed at solving the problem of false triggering of antiviruses by creating a “white list” of files, the security of which will be publicly confirmed. A “Verified list” of secure files will be available on the VirusTotal website.
The problem posed is well known and brings trouble to both computer owners and antivirus vendors. For example, about 4 years ago, Avira took for a virus a dll file that is part of it; some time later, a similar problem occurred with Kaspersky Anti-Virus, the Windows 7 system component mistaken for a malicious file.
VirusTotal, owned by Google since 2012, proposes to solve this problem by making a list of trusted files that software vendors should send to specialists for analysis. For each file sent, its hash and the date of the scan by the antivirus program will be published so that users can judge its security.
Look “file on file” will be approximately as follows:
')
VirusTotal engineers note their close collaboration with Microsoft. Specialists from Redmond provided VirusTotal with metadata about their software, so that more than 6000 false positives of the online scanner were removed in just one week. The company hopes that the same cooperation will continue with other market participants.
The problem posed is well known and brings trouble to both computer owners and antivirus vendors. For example, about 4 years ago, Avira took for a virus a dll file that is part of it; some time later, a similar problem occurred with Kaspersky Anti-Virus, the Windows 7 system component mistaken for a malicious file.
VirusTotal, owned by Google since 2012, proposes to solve this problem by making a list of trusted files that software vendors should send to specialists for analysis. For each file sent, its hash and the date of the scan by the antivirus program will be published so that users can judge its security.
Look “file on file” will be approximately as follows:
')
VirusTotal engineers note their close collaboration with Microsoft. Specialists from Redmond provided VirusTotal with metadata about their software, so that more than 6000 false positives of the online scanner were removed in just one week. The company hopes that the same cooperation will continue with other market participants.
Source: https://habr.com/ru/post/376431/
All Articles