3

For example, if an antivirus gives no alert for a couple of months, how do you confirm if the antivirus is working to prevent viruses, and not just hung?

1
  • The term you are looking for is "false negative".
    – schroeder
    Nov 30, 2022 at 19:45

1 Answer 1

4

You test it with simulated malware.

This could be anything from a simple EICAR test file (to confirm that it's actually running and doing what it should) through to red-team style engagements where you have people developing and deploying custom "malware" implants in your network to see if they're detected.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.