Malware Simulators cannot test Antivirus Software
Malware simulators cannot properly test antivirus software, nor do they improve the protection capabilities of antivirus software.
I will walk you through an imaginary example of creating and improving a ransomware simulator and explain at each step why it is still no proper tool to test antivirus software.
Final note: Malware simulators do have legitimate use cases. E.g. they can be used as part of a training program, or they were specifically made for a certain antivirus product by the same people or company who also created it. In that case it is more like an integration test tool that targets the way the product works and those can't be expected to work with other products.
Malware analysis courses: https://malwareanalysis-for-hedgehogs...
Buy me a coffee: https://ko-fi.com/struppigel
Follow me on Twitter: / struppigel
00:00 Intro
00:20 My job
01:40 The main issue with malware simulators
02:48 Role of false positives
04:02 Why certain clean software looks like malware
05:37 Hyothetical ransomware simulator - renaming files
06:30 Hyothetical ransomware simulator - encrypt self-dropped files
07:31 Hyothetical ransomware simulator - encrypt other files
10:36 What happens if you submit simulators to antivirus companies
#malware #antivirus #malwaresimulators #simulators #malwareanalysis #simulator