VirusTotal APK 病毒检测统计 2021-09
VirusTotal (简称 VT), 是谷歌旗下一家免费提供可疑文件扫描服务的网站. VT 上有超过50家反病毒引擎提供实时扫描服务. 我们每天收集用户上传到 VT 的 APK 样本以及各家引擎的扫描结果, 并通过保守的策略筛选出数万的良性和恶意样本, 然后统计各家引擎的病毒检测结果.
每天, 我们会生成一个包含各家检测数据的 CSV 文件. 文件中会列出样本的 MD5 哈希值, 标签 (0 标示良性样本, 1 标示恶意样本), 以及各家的检测结果 (0 表示检测为良性样本, 1 表示检测为恶意样本). 每个月的 CSV 文件会被打包并上传到亚马逊 AWS S3. 有兴趣的读者可以下载检验各家杀毒引擎的检测结果.
以下为检测结果的下载链接:
https://virustotal-results.s3-us-west-1.amazonaws.com/VirusTotal_Results_20210901_20210930.zip
下面的表格列出了各家杀毒引擎的统计结果, 其中各列的含义如下:
- Vendor: 杀毒引擎厂商名称
- TPR: True Positive Rate, 恶意样本检出率
- FPR: False Positive Rate, 良性样本误报率
- TP: True Positive, 正确检出为恶意样本的数量
- FP: False Positive, 误报为恶意样本的数量
- TN: True Negative, 正确检出为良性样本的数量
- FN: False Negative, 误报为良性样本的数量
| Vendor | TPR | FPR | TP | FP | TN | FN |
|---|---|---|---|---|---|---|
| K7GW | 99.73% | 0.10% | 10871 | 207 | 205774 | 29 |
| ESET-NOD32 | 99.65% | 0.03% | 10862 | 54 | 205927 | 38 |
| Fortinet | 99.61% | 0.09% | 10858 | 180 | 205801 | 42 |
| Avast-Mobile | 98.89% | 0.72% | 10779 | 1484 | 204497 | 121 |
| Ikarus | 98.28% | 0.06% | 10712 | 132 | 205849 | 188 |
| DrWeb | 98.07% | 0.09% | 10690 | 182 | 205799 | 210 |
| Avira | 98.06% | 0.01% | 10688 | 14 | 205967 | 212 |
| Trustlook | 96.25% | 0.00% | 10491 | 10 | 205971 | 409 |
| Kaspersky | 94.47% | 0.02% | 10297 | 31 | 205950 | 603 |
| McAfee | 94.14% | 0.03% | 10261 | 54 | 205927 | 639 |
| AhnLab-V3 | 93.65% | 0.02% | 10208 | 35 | 205946 | 692 |
| CAT-QuickHeal | 92.50% | 0.05% | 10082 | 104 | 205877 | 818 |
| Microsoft | 90.21% | 0.02% | 9833 | 44 | 205937 | 1067 |
| McAfee-GW-Edition | 86.45% | 0.03% | 9423 | 56 | 205925 | 1477 |
| Sophos | 80.59% | 0.01% | 8784 | 25 | 205956 | 2116 |
| NANO-Antivirus | 76.53% | 0.02% | 8342 | 43 | 205938 | 2558 |
| SymantecMobileInsight | 73.94% | 2.69% | 8059 | 5536 | 200445 | 2841 |
| Cyren | 68.58% | 0.02% | 7475 | 41 | 205940 | 3425 |
| Tencent | 67.96% | 0.12% | 7408 | 251 | 205730 | 3492 |
| Symantec | 66.94% | 0.00% | 7296 | 4 | 205977 | 3604 |
| Alibaba | 63.95% | 0.00% | 6971 | 8 | 205973 | 3929 |
| Antiy-AVL | 63.48% | 0.09% | 6919 | 185 | 205796 | 3981 |
| MAX | 55.36% | 0.00% | 6034 | 4 | 205977 | 4866 |
| ZoneAlarm | 48.06% | 0.02% | 5239 | 36 | 205945 | 5661 |
| AVG | 42.71% | 0.02% | 4655 | 31 | 205950 | 6245 |
| Avast | 42.56% | 0.02% | 4639 | 31 | 205950 | 6261 |
| Comodo | 28.25% | 0.09% | 3079 | 186 | 205795 | 7821 |
| Zillya | 26.37% | 0.08% | 2874 | 157 | 205824 | 8026 |
| GData | 16.16% | 0.00% | 1761 | 1 | 205980 | 9139 |
| Yandex | 14.40% | 0.00% | 1570 | 4 | 205977 | 9330 |
| ClamAV | 14.33% | 0.08% | 1562 | 174 | 205807 | 9338 |
| BitDefender | 14.19% | 0.00% | 1547 | 1 | 205980 | 9353 |
| Emsisoft | 14.02% | 0.00% | 1528 | 0 | 205981 | 9372 |
| Jiangmin | 11.43% | 0.48% | 1246 | 991 | 204990 | 9654 |
| Kingsoft | 9.48% | 0.01% | 1033 | 27 | 205954 | 9867 |
| MicroWorld-eScan | 9.45% | 0.00% | 1030 | 0 | 205981 | 9870 |
| F-Secure | 9.39% | 0.00% | 1024 | 1 | 205980 | 9876 |
| Arcabit | 8.06% | 0.00% | 879 | 1 | 205980 | 10021 |
| Ad-Aware | 4.09% | 0.00% | 446 | 0 | 205981 | 10454 |
| Zoner | 4.08% | 0.00% | 445 | 8 | 205973 | 10455 |
| TrendMicro-HouseCall | 3.80% | 0.02% | 414 | 36 | 205945 | 10486 |
| TrendMicro | 3.25% | 0.03% | 354 | 65 | 205916 | 10546 |
| Rising | 1.98% | 0.01% | 216 | 14 | 205967 | 10684 |
| VBA32 | 0.94% | 0.01% | 103 | 28 | 205953 | 10797 |
| Panda | 0.58% | 0.00% | 63 | 1 | 205980 | 10837 |
| Baidu | 0.30% | 0.01% | 33 | 27 | 205954 | 10867 |
| ViRobot | 0.26% | 0.00% | 28 | 1 | 205980 | 10872 |
| SentinelOne | 0.08% | 0.00% | 9 | 0 | 205981 | 10891 |
| VIPRE | 0.04% | 0.00% | 4 | 0 | 205981 | 10896 |
| K7AntiVirus | 0.03% | 0.00% | 3 | 0 | 205981 | 10897 |
| Malwarebytes | 0.02% | 0.00% | 2 | 1 | 205980 | 10898 |
| SUPERAntiSpyware | 0.02% | 0.00% | 2 | 0 | 205981 | 10898 |
| ALYac | 0.01% | 0.00% | 1 | 0 | 205981 | 10899 |
| Bkav | 0.00% | 0.00% | 0 | 0 | 205981 | 10900 |
| TotalDefense | 0.00% | 0.00% | 0 | 0 | 205981 | 10900 |
| nProtect | 0.00% | 0.00% | 0 | 0 | 205981 | 10900 |
| CMC | 0.00% | 0.00% | 0 | 0 | 205981 | 10900 |
| CrowdStrike | 0.00% | 0.00% | 0 | 0 | 205981 | 10900 |
| TheHacker | 0.00% | 0.00% | 0 | 0 | 205981 | 10900 |
| eScan | 0.00% | 0.00% | 0 | 0 | 205981 | 10900 |
| Babable | 0.00% | 0.00% | 0 | 0 | 205981 | 10900 |
| Invincea | 0.00% | 0.00% | 0 | 0 | 205981 | 10900 |
| F-Prot | 0.00% | 0.00% | 0 | 0 | 205981 | 10900 |
| Endgame | 0.00% | 0.00% | 0 | 0 | 205981 | 10900 |
| Webroot | 0.00% | 0.00% | 0 | 0 | 205981 | 10900 |
| AegisLab | 0.00% | 0.00% | 0 | 0 | 205981 | 10900 |
| AVware | 0.00% | 0.00% | 0 | 0 | 205981 | 10900 |
| Qihoo-360 | 0.00% | 0.00% | 0 | 0 | 205981 | 10900 |
| TotalGoodware | 205981 | |||||
| TotalMalware | 10900 | |||||
| TotalSample | 216881 |
如有任何疑问, 欢迎随时邮件联系 lxu@trustlook.com. 谢谢.