VirusTotal APK 病毒检测统计 - 第16周: 20210412-20210418
VirusTotal (简称 VT), 是谷歌旗下一家免费提供可疑文件扫描服务的网站. VT 上有超过50家反病毒引擎提供实时扫描服务. 我们每天收集用户上传到 VT 的 APK 样本以及各家引擎的扫描结果, 并通过保守的策略筛选出数万的良性和恶意样本, 然后统计各家引擎的病毒检测结果.
每天, 我们会生成一个包含各家检测数据的 CSV 文件. 文件中会列出样本的 MD5 哈希值, 标签 (0 标示良性样本, 1 标示恶意样本), 以及各家的检测结果 (0 表示检测为良性样本, 1 表示检测为恶意样本). 每星期 7 天的的 CSV 文件会被打包并上传到亚马逊 AWS S3. 有兴趣的读者可以下载检验各家杀毒引擎的检测结果.
以下为检测结果的下载链接:
https://virustotal-results.s3-us-west-1.amazonaws.com/VirusTotal_Results_20210412_20210418.zip
下面的表格列出了各家杀毒引擎的统计结果, 其中各列的含义如下:
- Vendor: 杀毒引擎厂商名称
- TPR: True Positive Rate, 恶意样本检出率
- FPR: False Positive Rate, 良性样本误报率
- TP: True Positive, 正确检出为恶意样本的数量
- FP: False Positive, 误报为恶意样本的数量
- TN: True Negative, 正确检出为良性样本的数量
- FN: False Negative, 误报为良性样本的数量
| Vendor | TPR | FPR | TP | FP | TN | FN |
|---|---|---|---|---|---|---|
| K7GW | 99.82% | 0.16% | 48196 | 266 | 169910 | 88 |
| ESET-NOD32 | 99.43% | 0.01% | 48008 | 18 | 170158 | 276 |
| Avira | 99.16% | 0.00% | 47880 | 5 | 170171 | 404 |
| Trustlook | 98.91% | 0.04% | 47759 | 61 | 170115 | 525 |
| Fortinet | 98.78% | 0.01% | 47694 | 18 | 170158 | 590 |
| CAT-QuickHeal | 98.74% | 0.01% | 47677 | 20 | 170156 | 607 |
| AhnLab-V3 | 97.96% | 0.03% | 47298 | 48 | 170128 | 986 |
| Avast-Mobile | 96.50% | 0.33% | 46596 | 561 | 169615 | 1688 |
| SymantecMobileInsight | 96.30% | 3.33% | 46496 | 5673 | 164503 | 1788 |
| AegisLab | 95.79% | 0.09% | 46249 | 151 | 170025 | 2035 |
| Symantec | 94.93% | 0.13% | 45836 | 225 | 169951 | 2448 |
| Alibaba | 94.77% | 0.00% | 45760 | 6 | 170170 | 2524 |
| McAfee-GW-Edition | 92.51% | 0.08% | 44667 | 138 | 170038 | 3617 |
| Tencent | 91.58% | 0.11% | 44220 | 193 | 169983 | 4064 |
| DrWeb | 90.43% | 0.40% | 43664 | 685 | 169491 | 4620 |
| McAfee | 89.81% | 0.01% | 43363 | 11 | 170165 | 4921 |
| NANO-Antivirus | 87.72% | 0.05% | 42354 | 83 | 170093 | 5930 |
| Qihoo-360 | 86.18% | 0.04% | 41612 | 65 | 170111 | 6672 |
| Sophos | 79.80% | 0.01% | 38532 | 17 | 170159 | 9752 |
| Ikarus | 77.93% | 0.13% | 37627 | 223 | 169953 | 10657 |
| Kaspersky | 77.71% | 0.00% | 37522 | 0 | 170176 | 10762 |
| Microsoft | 77.02% | 0.01% | 37187 | 16 | 170160 | 11097 |
| Cyren | 69.76% | 0.01% | 33681 | 11 | 170165 | 14603 |
| MAX | 67.59% | 0.00% | 32637 | 0 | 170176 | 15647 |
| ZoneAlarm | 57.17% | 0.00% | 27605 | 1 | 170175 | 20679 |
| Comodo | 44.99% | 0.07% | 21725 | 120 | 170056 | 26559 |
| AVG | 43.42% | 0.01% | 20966 | 14 | 170162 | 27318 |
| Avast | 43.06% | 0.01% | 20789 | 14 | 170162 | 27495 |
| Zillya | 28.09% | 0.09% | 13564 | 153 | 170023 | 34720 |
| ClamAV | 24.04% | 0.12% | 11609 | 206 | 169970 | 36675 |
| Jiangmin | 23.44% | 0.57% | 11316 | 978 | 169198 | 36968 |
| GData | 19.22% | 0.00% | 9280 | 0 | 170176 | 39004 |
| BitDefender | 16.00% | 0.00% | 7727 | 0 | 170176 | 40557 |
| Emsisoft | 15.80% | 0.00% | 7631 | 0 | 170176 | 40653 |
| Rising | 15.71% | 0.01% | 7586 | 15 | 170161 | 40698 |
| Kingsoft | 12.12% | 0.02% | 5853 | 35 | 170141 | 42431 |
| VBA32 | 9.14% | 0.01% | 4414 | 17 | 170159 | 43870 |
| Zoner | 8.07% | 0.00% | 3896 | 3 | 170173 | 44388 |
| MicroWorld-eScan | 6.60% | 0.00% | 3185 | 0 | 170176 | 45099 |
| Antiy-AVL | 6.12% | 0.04% | 2953 | 70 | 170106 | 45331 |
| Yandex | 5.94% | 0.00% | 2866 | 1 | 170175 | 45418 |
| TrendMicro-HouseCall | 5.38% | 0.00% | 2598 | 4 | 170172 | 45686 |
| Arcabit | 5.06% | 0.00% | 2441 | 0 | 170176 | 45843 |
| TrendMicro | 4.88% | 0.01% | 2358 | 14 | 170162 | 45926 |
| F-Secure | 3.17% | 0.00% | 1531 | 2 | 170174 | 46753 |
| Ad-Aware | 1.64% | 0.00% | 791 | 0 | 170176 | 47493 |
| Panda | 1.10% | 0.00% | 530 | 6 | 170170 | 47754 |
| Babable | 0.27% | 0.03% | 130 | 55 | 170121 | 48154 |
| K7AntiVirus | 0.19% | 0.00% | 90 | 0 | 170176 | 48194 |
| ALYac | 0.12% | 0.00% | 58 | 0 | 170176 | 48226 |
| Baidu | 0.12% | 0.01% | 56 | 10 | 170166 | 48228 |
| ViRobot | 0.11% | 0.00% | 55 | 3 | 170173 | 48229 |
| VIPRE | 0.06% | 0.00% | 31 | 0 | 170176 | 48253 |
| F-Prot | 0.05% | 0.00% | 26 | 0 | 170176 | 48258 |
| SentinelOne | 0.04% | 0.00% | 17 | 1 | 170175 | 48267 |
| Malwarebytes | 0.03% | 0.01% | 14 | 10 | 170166 | 48270 |
| CMC | 0.01% | 0.00% | 3 | 0 | 170176 | 48281 |
| SUPERAntiSpyware | 0.01% | 0.00% | 3 | 0 | 170176 | 48281 |
| Bkav | 0.00% | 0.00% | 0 | 1 | 170175 | 48284 |
| TotalDefense | 0.00% | 0.00% | 0 | 0 | 170176 | 48284 |
| nProtect | 0.00% | 0.00% | 0 | 0 | 170176 | 48284 |
| CrowdStrike | 0.00% | 0.00% | 0 | 0 | 170176 | 48284 |
| TheHacker | 0.00% | 0.00% | 0 | 0 | 170176 | 48284 |
| eScan | 0.00% | 0.00% | 0 | 0 | 170176 | 48284 |
| Invincea | 0.00% | 0.00% | 0 | 0 | 170176 | 48284 |
| Endgame | 0.00% | 0.00% | 0 | 0 | 170176 | 48284 |
| Webroot | 0.00% | 0.00% | 0 | 0 | 170176 | 48284 |
| AVware | 0.00% | 0.00% | 0 | 0 | 170176 | 48284 |
| TotalGoodware | 170176 | |||||
| TotalMalware | 48284 | |||||
| TotalSample | 218460 |
如有任何疑问, 欢迎随时邮件联系 lxu@trustlook.com. 谢谢.