How We Test Archives - Page 2 of 8

All posts

Cyber Security DE:CODED – Full attack chain testing

Written By

SE Labs Team

Published on

February 22, 2023

“Because we test realistically, sometimes bad guys come onto our test network and mess with us”

Show notes for series 2, episode 9 (final episode of series 2)

What is the attack chain? Why is it good to test using full attack chains? And what are some of the alternative approaches, with their pros and cons? We’ll try to answer all of these questions and more in this special presentation episode recorded at the AVAR conference in Singapore in December 2022.

All posts

Cyber Security DE:CODED – Cheating in security testing

Written By

SE Labs Team

Published on

January 25, 2023

“If they chose the best products by rolling a dice then they should say so”

Show notes for series 2, episode 8

If we’ve given the impression that we’re at the heart of the security world, working with the organisations that spend billions on security – and with the companies that make billions by selling security products – you’d be right. And that puts us in an awkward position. Because we want to make security better for everyone. And sometimes that means speaking some uncomfortable truths.

This episode is the uncomfortable truth episode.

All posts

Choose your reviews carefully

Written By

SE Labs Team

Published on

December 22, 2022

Three reasons our security tests are the most trustworthy

This security report compares anti-malware products. Its job is to help you make informed buying decisions. We applied advanced testing techniques to ensure that the results are meaningful. The same cannot be said for many other tests. I’d say you’ve picked a good one to read, here. Let’s prove that.

Security report checklist

There are a few questions you should ask when you look at a security report. These are all very important but in random order here they are:

All posts

Deep and direct ransomware testing

Written By

SE Labs Team

Published on

October 25, 2022

300 ways to run a ransomware attack!

SE Labs tested CrowdStrike Falcon against a range of ransomware attacks designed to extort victims. These attacks were realistic, using the same tactics and techniques as those used against victims in recent months.

Test like ransomware hackers

Testers attacked target systems, protected by CrowdStrike Falcon. Our testers in the lab acted in the same way as we observe ransomware groups to behave on the internet.

Attacks were initiated from the start of the attack chain, using phishing email links and attachments, as just two examples. Each attack was run from the very start to its obvious conclusion, which means attempting to steal, encrypt and destroy sensitive data on the target systems.

All posts

Anti-virus testing

Written By

SE Labs Team

Published on

How hard should a security test be?

Anti-virus testing

Thank you for opening this report. We hope you’ll be able to use it to get a better idea about which anti-malware products you might want to buy (or get rid of!)

What do the awards mean?

The report starts off with a list of products, each of which win impressive-looking awards. But have you considered what those awards mean? How come there aren’t any massive losers in the list? How hard is this security test anyway?

All posts

Endpoint detection compared

Written By

SE Labs Team

Published on

July 28, 2022

We compare endpoint security products directly using real, major threats.

Welcome to the first edition of the Enterprise Advanced Security test that compares different endpoint security products directly. We look at how they handle the major threats that face all businesses, from the Global 100, down to medium enterprises. And most likely small businesses, too.

Choose the best enterprise endpoint security solution

We give an overall score but also dig down into the details that your security team will care about. This report explains the different levels of coverage that these products provide.

All posts

Cyber Security DE:CODED – Testing like hackers

Written By

SE Labs Team

Published on

July 27, 2022

“When it’s not a pay-to-play test that’s behind the curtain…”

Show notes for series 2, episode 3

What does it mean to test like a hacker? Can a well-intentioned tester behave the same as a real cybercriminal?

When you’re looking for a good security test, how can you tell the useful from the misleading?

Our email accounts sit at the centre of our digital lives. We look at ways to bullet-proof your most important internet account.

We discuss these questions, and more, with Frank Duff (ex-MITRE, now Tidal Cyber), Mike Sentonas (CrowdStrike) and Siggi Stefnisson (Avast).

Security Life Hack from Daniel Cuthbert!

All posts

Endpoint Detection and Response is more than anti-virus

Written By

SE Labs Team

Published on

July 14, 2022

Understand cybersecurity testing with visible threat intelligence.

An Endpoint Detection and Response (EDR) product is more than anti-virus, which is why it requires advanced testing. This means testers must behave like real attackers, following every step of an attack.

Intelligence-led testing

While it’s tempting to save time by taking shortcuts, a tester must go through an entire attack to truly understand the capabilities of EDR security products.

Each step of the attack must be realistic too. You can’t just make up what you think bad guys are doing and hope you’re right. This is why SE Labs tracks cybercriminal behaviour and builds tests based on how bad guys try to compromise victims.

All posts

How We Test

Anti-virus certification and ELAM

Written By

SE Labs Team

Published on

July 12, 2022

A route to accessing Windows Early Launch Antimalware (ELAM).

Anti-malware products monitor Microsoft Windows for malware. They try to notice when new, unwanted software runs, but some malware can be extra sneaky and hide. To get ahead of the game anti-malware products can start monitoring the system early, before other software applications start. The security software then watches as the various programs load during the Windows boot-up process.

All posts

Cyber Security DE:CODED – Firewall speeds and VPN risks

Written By

SE Labs Team

Published on

June 29, 2022

“If they are not getting any money from you, then where are they getting the money from?”

Show notes for series 2, episode 2

Is your firewall as fast as you think? What does XDR mean and how does it work? Do you need a personal VPN?

We talk to Brian Monkman (NetSecOPEN), Chad Skipper (VMware), Luis Corrons (Avast) and Daniel Cuthbert.

This episode’s Security Life Hack from Dennis Batchelder (AppEsteem)!

Category: How We Test

Choose your reviews carefully

Three reasons our security tests are the most trustworthy

Security report checklist

Deep and direct ransomware testing

300 ways to run a ransomware attack!

Test like ransomware hackers

Anti-virus testing

How hard should a security test be?

Anti-virus testing

What do the awards mean?

Endpoint detection compared

We compare endpoint security products directly using real, major threats.

Choose the best enterprise endpoint security solution

Endpoint Detection and Response is more than anti-virus

Understand cybersecurity testing with visible threat intelligence.

Intelligence-led testing

Anti-virus certification and ELAM

A route to accessing Windows Early Launch Antimalware (ELAM).

Contact us

Get in touch

Feel free to reach out to us with any questions or inquiries