VirusTotal APK 病毒检测统计 - 第20周: 20210510-20210516
VirusTotal (简称 VT), 是谷歌旗下一家免费提供可疑文件扫描服务的网站. VT 上有超过50家反病毒引擎提供实时扫描服务. 我们每天收集用户上传到 VT 的 APK 样本以及各家引擎的扫描结果, 并通过保守的策略筛选出数万的良性和恶意样本, 然后统计各家引擎的病毒检测结果.
每天, 我们会生成一个包含各家检测数据的 CSV 文件. 文件中会列出样本的 MD5 哈希值, 标签 (0 标示良性样本, 1 标示恶意样本), 以及各家的检测结果 (0 表示检测为良性样本, 1 表示检测为恶意样本). 每星期 7 天的的 CSV 文件会被打包并上传到亚马逊 AWS S3. 有兴趣的读者可以下载检验各家杀毒引擎的检测结果.
以下为检测结果的下载链接:
https://virustotal-results.s3-us-west-1.amazonaws.com/VirusTotal_Results_20210510_20210516.zip
下面的表格列出了各家杀毒引擎的统计结果, 其中各列的含义如下:
- Vendor: 杀毒引擎厂商名称
- TPR: True Positive Rate, 恶意样本检出率
- FPR: False Positive Rate, 良性样本误报率
- TP: True Positive, 正确检出为恶意样本的数量
- FP: False Positive, 误报为恶意样本的数量
- TN: True Negative, 正确检出为良性样本的数量
- FN: False Negative, 误报为良性样本的数量
| Vendor | TPR | FPR | TP | FP | TN | FN |
|---|---|---|---|---|---|---|
| ESET-NOD32 | 99.24% | 0.01% | 6635 | 5 | 41984 | 51 |
| Trustlook | 98.82% | 0.19% | 6607 | 81 | 41908 | 79 |
| K7GW | 98.80% | 0.10% | 6606 | 40 | 41949 | 80 |
| Ikarus | 98.76% | 0.08% | 6603 | 35 | 41954 | 83 |
| Fortinet | 98.73% | 0.01% | 6601 | 5 | 41984 | 85 |
| Avast-Mobile | 98.01% | 0.32% | 6553 | 133 | 41856 | 133 |
| CAT-QuickHeal | 97.89% | 0.01% | 6545 | 3 | 41986 | 141 |
| Avira | 97.50% | 0.00% | 6519 | 1 | 41988 | 167 |
| DrWeb | 97.17% | 0.18% | 6497 | 76 | 41913 | 189 |
| AhnLab-V3 | 96.07% | 0.03% | 6423 | 12 | 41977 | 263 |
| McAfee | 93.82% | 0.00% | 6273 | 1 | 41988 | 413 |
| Kaspersky | 92.81% | 0.01% | 6205 | 3 | 41986 | 481 |
| McAfee-GW-Edition | 88.24% | 0.03% | 5900 | 11 | 41978 | 786 |
| AegisLab | 84.31% | 0.10% | 5637 | 40 | 41949 | 1049 |
| SymantecMobileInsight | 83.68% | 2.37% | 5595 | 994 | 40995 | 1091 |
| Microsoft | 82.37% | 0.02% | 5507 | 10 | 41979 | 1179 |
| NANO-Antivirus | 81.83% | 0.04% | 5471 | 17 | 41972 | 1215 |
| Symantec | 77.76% | 0.05% | 5199 | 22 | 41967 | 1487 |
| Sophos | 72.58% | 0.01% | 4853 | 5 | 41984 | 1833 |
| Alibaba | 68.98% | 0.01% | 4612 | 4 | 41985 | 2074 |
| Tencent | 66.36% | 0.08% | 4437 | 33 | 41956 | 2249 |
| ZoneAlarm | 57.40% | 0.01% | 3838 | 4 | 41985 | 2848 |
| MAX | 53.31% | 0.00% | 3564 | 0 | 41989 | 3122 |
| Cyren | 38.77% | 0.01% | 2592 | 3 | 41986 | 4094 |
| AVG | 34.37% | 0.01% | 2298 | 6 | 41983 | 4388 |
| Avast | 34.18% | 0.01% | 2285 | 6 | 41983 | 4401 |
| Zillya | 30.38% | 0.10% | 2031 | 42 | 41947 | 4655 |
| Comodo | 26.07% | 0.06% | 1743 | 27 | 41962 | 4943 |
| Jiangmin | 23.23% | 0.75% | 1553 | 316 | 41673 | 5133 |
| GData | 18.47% | 0.00% | 1235 | 0 | 41989 | 5451 |
| BitDefender | 18.07% | 0.00% | 1208 | 0 | 41989 | 5478 |
| Emsisoft | 17.77% | 0.00% | 1188 | 0 | 41989 | 5498 |
| ClamAV | 14.06% | 0.12% | 940 | 50 | 41939 | 5746 |
| TrendMicro-HouseCall | 9.24% | 0.02% | 618 | 7 | 41982 | 6068 |
| Arcabit | 9.12% | 0.00% | 610 | 0 | 41989 | 6076 |
| Rising | 8.57% | 0.00% | 573 | 2 | 41987 | 6113 |
| Yandex | 8.38% | 0.01% | 560 | 4 | 41985 | 6126 |
| F-Secure | 6.57% | 0.00% | 439 | 0 | 41989 | 6247 |
| MicroWorld-eScan | 6.22% | 0.00% | 416 | 0 | 41989 | 6270 |
| Zoner | 5.76% | 0.00% | 385 | 1 | 41988 | 6301 |
| Antiy-AVL | 4.86% | 0.03% | 325 | 12 | 41977 | 6361 |
| Kingsoft | 4.77% | 0.02% | 319 | 8 | 41981 | 6367 |
| TrendMicro | 1.94% | 0.05% | 130 | 19 | 41970 | 6556 |
| VBA32 | 1.06% | 0.01% | 71 | 3 | 41986 | 6615 |
| Ad-Aware | 0.87% | 0.00% | 58 | 0 | 41989 | 6628 |
| VIPRE | 0.40% | 0.00% | 27 | 0 | 41989 | 6659 |
| Babable | 0.30% | 0.04% | 20 | 17 | 41972 | 6666 |
| Panda | 0.27% | 0.00% | 18 | 0 | 41989 | 6668 |
| F-Prot | 0.16% | 0.00% | 11 | 0 | 41989 | 6675 |
| Baidu | 0.12% | 0.02% | 8 | 9 | 41980 | 6678 |
| ViRobot | 0.07% | 0.00% | 5 | 0 | 41989 | 6681 |
| ALYac | 0.03% | 0.00% | 2 | 0 | 41989 | 6684 |
| Malwarebytes | 0.01% | 0.00% | 1 | 0 | 41989 | 6685 |
| SentinelOne | 0.01% | 0.00% | 1 | 0 | 41989 | 6685 |
| Bkav | 0.00% | 0.00% | 0 | 1 | 41988 | 6686 |
| TotalDefense | 0.00% | 0.00% | 0 | 0 | 41989 | 6686 |
| nProtect | 0.00% | 0.00% | 0 | 0 | 41989 | 6686 |
| CMC | 0.00% | 0.00% | 0 | 0 | 41989 | 6686 |
| CrowdStrike | 0.00% | 0.00% | 0 | 0 | 41989 | 6686 |
| K7AntiVirus | 0.00% | 0.00% | 0 | 0 | 41989 | 6686 |
| TheHacker | 0.00% | 0.00% | 0 | 0 | 41989 | 6686 |
| eScan | 0.00% | 0.00% | 0 | 0 | 41989 | 6686 |
| SUPERAntiSpyware | 0.00% | 0.00% | 0 | 0 | 41989 | 6686 |
| Invincea | 0.00% | 0.00% | 0 | 0 | 41989 | 6686 |
| Endgame | 0.00% | 0.00% | 0 | 0 | 41989 | 6686 |
| Webroot | 0.00% | 0.00% | 0 | 0 | 41989 | 6686 |
| AVware | 0.00% | 0.00% | 0 | 0 | 41989 | 6686 |
| Qihoo-360 | 0.00% | 0.00% | 0 | 0 | 41989 | 6686 |
| TotalGoodware | 41989 | |||||
| TotalMalware | 6686 | |||||
| TotalSample | 48675 |
如有任何疑问, 欢迎随时邮件联系 lxu@trustlook.com. 谢谢.