Archive notice: This article was originally published on June 18, 2008. Links and embedded videos are preserved as part of the historical record.
The test focused primarily on effectiveness in detecting unknown malicious programs not yet included in antivirus databases. AV-Comparatives subjected Kaspersky Internet Security 2009 to separate tests because it is the first comprehensive security solution that, in addition to signature-based malware detection and heuristic and behavioral analysis, also uses a previously unique activity-filtering module with HIPS technology (Host-based Intrusion Prevention System).
At the same time as testing Kaspersky Internet Security 2009, AV-Comparatives experts conducted a retrospective test of the proactive protection offered by various antivirus solutions. Kaspersky Internet Security 2009 automatically blocked 68 percent of all malicious programs or recommended that the user block them. This gave it one of the three best results. The application activity-filtering module implemented in Kaspersky Internet Security 2009 protects the system against all threats, both known and unknown. Because the Russian security software manufacturer’s product was not yet available on the global market at the time of the test, these results were not included in the corresponding test report.
Kaspersky Internet Security 2009 uses a variety of technologies. Through multiple analyses, the program assesses unknown applications running on the PC and creates a differentiated threat rating. This assessment serves as the basis for granting access rights to the programs. If an application is classified as suspicious, it is given no access, or only restricted access, to important resources such as the operating system, network, confidential data, system privileges, or certain devices. The probability of infection by malicious code is correspondingly low. The new technology in Kaspersky products, which combines blacklists and whitelists with behavior-based detection, drastically reduces prompts to the user and false positives.
AV-Comparatives experts particularly praised the use of HIPS technology to control application activity. HIPS detects and blocks new malicious programs even before a signature is published. The approach implemented in Kaspersky Internet Security 2009 requires no system configuration by the user and prevents false alarms for harmless programs. Kaspersky Internet Security 2009 can therefore also be used easily by beginners.
Kaspersky Internet Security 2009 has been available in stores since early June.
