VirusTotal APK 病毒检测统计 - 第11周: 20210308-20210314
VirusTotal (简称 VT), 是谷歌旗下一家免费提供可疑文件扫描服务的网站. VT 上有超过50家反病毒引擎提供实时扫描服务. 我们每天收集用户上传到 VT 的 APK 样本以及各家引擎的扫描结果, 并通过保守的策略筛选出数万的良性和恶意样本, 然后统计各家引擎的病毒检测结果.
每天, 我们会生成一个包含各家检测数据的 CSV 文件. 文件中会列出样本的 MD5 哈希值, 标签 (0 标示良性样本, 1 标示恶意样本), 以及各家的检测结果 (0 表示检测为良性样本, 1 表示检测为恶意样本). 每星期 7 天的的 CSV 文件会被打包并上传到亚马逊 AWS S3. 有兴趣的读者可以下载检验各家杀毒引擎的检测结果.
以下为检测结果的下载链接:
https://virustotal-results.s3-us-west-1.amazonaws.com/VirusTotal_Results_20210308_20210314.zip
下面的表格列出了各家杀毒引擎的统计结果, 其中各列的含义如下:
- Vendor: 杀毒引擎厂商名称
- TPR: True Positive Rate, 恶意样本检出率
- FPR: False Positive Rate, 良性样本误报率
- TP: True Positive, 正确检出为恶意样本的数量
- FP: False Positive, 误报为恶意样本的数量
- TN: True Negative, 正确检出为良性样本的数量
- FN: False Negative, 误报为良性样本的数量
| Vendor | TPR | FPR | TP | FP | TN | FN |
|---|---|---|---|---|---|---|
| K7GW | 99.40% | 0.05% | 12454 | 31 | 62929 | 75 |
| ESET-NOD32 | 99.39% | 0.01% | 12453 | 4 | 62956 | 76 |
| Avira | 98.80% | 0.00% | 12379 | 0 | 62960 | 150 |
| Avast-Mobile | 98.51% | 0.61% | 12342 | 385 | 62575 | 187 |
| DrWeb | 97.63% | 0.14% | 12232 | 87 | 62873 | 297 |
| Fortinet | 97.45% | 0.01% | 12210 | 5 | 62955 | 319 |
| AhnLab-V3 | 97.02% | 0.03% | 12156 | 22 | 62938 | 373 |
| CAT-QuickHeal | 95.46% | 0.01% | 11960 | 6 | 62954 | 569 |
| Kaspersky | 94.21% | 0.00% | 11803 | 1 | 62959 | 726 |
| Ikarus | 92.96% | 0.08% | 11647 | 50 | 62910 | 882 |
| McAfee | 92.07% | 0.01% | 11536 | 4 | 62956 | 993 |
| McAfee-GW-Edition | 87.87% | 0.01% | 11009 | 5 | 62955 | 1520 |
| Trustlook (引擎调试） | 86.80% | 0.10% | 10875 | 65 | 62895 | 1654 |
| AegisLab | 84.84% | 0.16% | 10629 | 101 | 62859 | 1900 |
| Sophos | 82.48% | 0.01% | 10334 | 8 | 62952 | 2195 |
| ZoneAlarm | 81.00% | 0.00% | 10149 | 1 | 62959 | 2380 |
| Microsoft | 79.09% | 0.02% | 9909 | 10 | 62950 | 2620 |
| Qihoo-360 | 78.13% | 0.00% | 9789 | 3 | 62957 | 2740 |
| SymantecMobileInsight | 70.77% | 2.01% | 8867 | 1264 | 61696 | 3662 |
| NANO-Antivirus | 70.54% | 0.02% | 8838 | 13 | 62947 | 3691 |
| Tencent | 65.91% | 0.05% | 8258 | 29 | 62931 | 4271 |
| Cyren | 64.58% | 0.00% | 8091 | 2 | 62958 | 4438 |
| Symantec | 62.13% | 0.01% | 7784 | 5 | 62955 | 4745 |
| Alibaba | 59.98% | 0.00% | 7515 | 3 | 62957 | 5014 |
| F-Secure | 52.41% | 0.00% | 6567 | 0 | 62960 | 5962 |
| MAX | 50.94% | 0.00% | 6382 | 0 | 62960 | 6147 |
| Antiy-AVL | 42.35% | 0.09% | 5306 | 56 | 62904 | 7223 |
| Avast | 33.64% | 0.03% | 4215 | 20 | 62940 | 8314 |
| AVG | 33.64% | 0.03% | 4215 | 20 | 62940 | 8314 |
| Comodo | 30.94% | 0.07% | 3876 | 43 | 62917 | 8653 |
| Zillya | 29.28% | 0.07% | 3669 | 47 | 62913 | 8860 |
| ClamAV | 13.27% | 0.15% | 1663 | 92 | 62868 | 10866 |
| Kingsoft | 8.02% | 0.01% | 1005 | 5 | 62955 | 11524 |
| GData | 7.54% | 0.00% | 945 | 0 | 62960 | 11584 |
| BitDefender | 7.10% | 0.00% | 890 | 0 | 62960 | 11639 |
| Emsisoft | 6.99% | 0.00% | 876 | 0 | 62960 | 11653 |
| Yandex | 6.46% | 0.00% | 809 | 0 | 62960 | 11720 |
| Arcabit | 6.39% | 0.00% | 800 | 0 | 62960 | 11729 |
| Zoner | 6.15% | 0.00% | 770 | 3 | 62957 | 11759 |
| Jiangmin | 4.82% | 0.08% | 604 | 48 | 62912 | 11925 |
| MicroWorld-eScan | 4.14% | 0.00% | 519 | 0 | 62960 | 12010 |
| Rising | 3.76% | 0.01% | 471 | 8 | 62952 | 12058 |
| Ad-Aware | 2.16% | 0.00% | 270 | 0 | 62960 | 12259 |
| TrendMicro-HouseCall | 1.87% | 0.03% | 234 | 21 | 62939 | 12295 |
| TrendMicro | 1.80% | 0.05% | 225 | 29 | 62931 | 12304 |
| VBA32 | 0.82% | 0.01% | 103 | 5 | 62955 | 12426 |
| TotalDefense | 0.53% | 0.00% | 66 | 0 | 62960 | 12463 |
| Panda | 0.50% | 0.00% | 63 | 0 | 62960 | 12466 |
| Baidu | 0.37% | 0.01% | 46 | 9 | 62951 | 12483 |
| ViRobot | 0.27% | 0.00% | 34 | 1 | 62959 | 12495 |
| VIPRE | 0.10% | 0.00% | 13 | 0 | 62960 | 12516 |
| Babable | 0.09% | 0.00% | 11 | 3 | 62957 | 12518 |
| K7AntiVirus | 0.07% | 0.00% | 9 | 0 | 62960 | 12520 |
| Malwarebytes | 0.05% | 0.00% | 6 | 3 | 62957 | 12523 |
| SentinelOne | 0.04% | 0.00% | 5 | 0 | 62960 | 12524 |
| ALYac | 0.03% | 0.00% | 4 | 0 | 62960 | 12525 |
| F-Prot | 0.01% | 0.00% | 1 | 0 | 62960 | 12528 |
| Bkav | 0.00% | 0.00% | 0 | 1 | 62959 | 12529 |
| nProtect | 0.00% | 0.00% | 0 | 0 | 62960 | 12529 |
| CMC | 0.00% | 0.00% | 0 | 0 | 62960 | 12529 |
| CrowdStrike | 0.00% | 0.00% | 0 | 0 | 62960 | 12529 |
| TheHacker | 0.00% | 0.00% | 0 | 0 | 62960 | 12529 |
| eScan | 0.00% | 0.00% | 0 | 0 | 62960 | 12529 |
| SUPERAntiSpyware | 0.00% | 0.00% | 0 | 0 | 62960 | 12529 |
| Invincea | 0.00% | 0.00% | 0 | 0 | 62960 | 12529 |
| Endgame | 0.00% | 0.00% | 0 | 0 | 62960 | 12529 |
| Webroot | 0.00% | 0.00% | 0 | 0 | 62960 | 12529 |
| AVware | 0.00% | 0.00% | 0 | 0 | 62960 | 12529 |
| TotalGoodware | 62960 | |||||
| TotalMalware | 12529 | |||||
| TotalSample | 75489 |
如有任何疑问, 欢迎随时邮件联系 lxu@trustlook.com. 谢谢.