eScan Internet Security Suite for SOHO vs AVG Internet Security
Content
COMPARISON
eScan Internet Security Suite for SOHO vs AVG Internet Security
eScan Internet Security Suite v11
Why do we need Internet Security?
vs AVG Internet Security 2011
Anti-Virus
I
n this day and age data theft is by far a major concern – be it for organizations or even individuals. Now the question that needs to be answered here is, 'What do we understand by data theft?', 'Is it limited to organizations or does it trickle down to end users/consumers too?'. The answer is simple – data that is of importance to you is also mighty important to snoopers too. It could be your school/college project or even specific files and folders. However for organizations, securing every bit is done on a much larger scale. Here it could be anything from financial accounts to intricate details of customers/employees. This is where endpoint protection plays a vital role.
But what do we mean by 'Endpoint Protection'? In computing terms, Endpoint basically refers to ports to which USB and FireWire based devices connect. Therefore, having these ports left open is a concern as there are high chances of data theft. At eScan we understand the needs of not only our enterprise users but also end users who require protection not only from Malware but also from data theft. Not only can users lock down all endpoints but it also prevents malicious programs from executing as and when a pendrive is inserted. Moreover with a large number of people logging into Networking Websites, malware writers are beginning to target sites such as Facebook, Twitter, Orkut (to name a few). For instance, 'My 1st St@tus' scam affected thousands of users on Facebook. However such applications don't just get added to your profile but are generally granted access by the user himself. Once allowed, the application can not only acquire profile details but can also post messages on your behalf. It not only ends there, the application then spreads across the network through all who are linked to your profile. While this particular application doesn't infect the PC, there are many other who direct you to malicious websites that could be home to Trojans and various other malware. To prevent such rogue instances from taking place eScan comes built with a URL filtering module that prevents web pages from getting redirected to malicious websites or URLs. Personal information can include anything from debit/credit card details, passwords for your personal accounts, bank details etc. To help protect your digital identity eScan ISS provides a much needed secure environment in comparison to other Security Suites. This would include certification levels reached by well known testing bodies such as AVComparatives, VirusBulletin and ICSA Labs. However another aspect that also needs to be taken into consideration is the number of false positives detected by the application. Therefore, just having a higher detection rate is never enough but being able to differentiate between malware (known/unknown) and genuine OS files is of utmost importance. The first half of this document provides a brief explanation of the features that are overlooked by our competitor but are made available in eScan ISS v11. The second half displays the effectiveness of the protection offered by both security companies – eScan and AVG.
www.escanav.com
Anti-Virus
Product Name
Manufacturer/Developer VB 100% Certified Unique Technology Proactive Security Real-Time AV Scanning Spyware, KeyLogger, Rootkit Blocker Real-Time File Monitor On-Demand Scan Anti-Spam Firewall (Inbound & Outbound ) Parental Control Malware URL Filter Anti – Phishing Privacy Protection Application Control Endpoint Security History/ Reports Web based Help Files and Folders Protection Asset Management Network Monitoring tool Update rollback Hotfix Rollback Auto download / update software version Auto Backup / Restore Remote Support Application Virtual Keyboard Entertainment/Gaming /Silent mode Creating/Burning Bootable Rescue Disk Automatic Patching of Windows® Operating System Vulnerabilities Laptop/Battery /Power saving mode for schedule scan Advanced Self-Protection Feature Real-Time email Scan Password protection Heuristic Scanning Registration/Activation:(via Web/SMS/eMail/FAX) Grid-based Web Access/Timing
eScan Internet Security Suite v11
MicroWorld
AVG Internet Security 2011
AVG
MicroWorld Winsock Layer
Link Scanner
(Intelligent and Faster) (with Cache Technology) (NILP RBL, SURBL) ,
x
x x x x x x x
Not Documented Not Documented Not Documented
x x x
Windows Based Linux Based
x x
x
www.escanav.com
Anti-Virus
Parental Control
The Internet has always been a one stop junction for a vast number of topics. It has come to such a state that anything and everything is available at the click of a button. However apart from the beneficial aspect it is also home to a magnitude of unwanted information. This would include information on various undesirable aspects such as pornography, drugs and gambling. With the help of this module parents can prevent kids from accessing undesirable sites and even block content that would otherwise damage the normal functionality of the computer. While the module is fully configurable it also features a set of four predefined profiles that can be assigned to users based on their age.
On demand scan (with cache-technology)
eScan features cache technology that creates a record or Whitelist of all files that are scanned on the first run. This ensures faster scan speeds and lower usage of system resources every subsequent runs. Only new or modified files are examined by the scanner.
Grid-based Web Access/Timing
Apart from its Web Filtering/Parental Control module the program also allows you to define time restrictions. Here you can limit the number of hours that a particular user is allowed to access the web or you could simply block web access on certain days.
Privacy Control
This module has been implemented to help keep your data confidential and to minimize the amount of slack from accumulating over a period of time. However when we speak about confidentiality the module is built towards erasing browsing cache, history, cookies, plugins and various other forms of computing slack that gets left behind either during program installation or browsing the web. In addition to this, users can also add their own set of files and folders that need to be cleaned on a regular basis.
Endpoint Security
To prevent data theft, eScan ISS v11 features Endpoint Security that allows blocking of all USB and FireWire ports. This ensures a higher level of privacy and security since the chances of data theft is minimized to a great extent. That apart – Administrators or users can also choose to enable 'Read Only' mode which basically allows users to only read content from USB drives. Other features include – disabling AutoPlay, Password protection and Whitelisting specific USB drives.
Application Control
Another aspect of Endpoint Security is the Application Control feature. This added feature allows you to block applications from running on your PC. It includes pre-defined computer games, instant messengers, video/music players and P2P applications. In addition to this users can also add applications that need blocking.
Web Based Help
An aspect that is also well taken care of is the eScan Wiki which is just a click away on our home page. The eScan Wiki is a comprehensive coverage of all our products. Here users can find product related information, tips as well solution based content that help resolve specific product related issues.
Network Monitoring Tool
In addition to the Firewall, eScan Anti-Virus also features a network monitoring tool that provides a detailed overview of the applications connected to the Internet. Generation of reports is also made available that gives you a detailed summary of the overall data transferred either monthly or weekly. In addition to this, users can also view the top ten applications for the day or you could simply specify the dates that need to be looked into.
www.escanav.com
Anti-Virus
Update/Hotfix Rollback
At the start of every update eScan v11 makes a backup of the current database. So if the event the application downloads an update/hotfix that's corrupt it automatically rolls back to its previous stable database. However to keep user interactivity at its bare minimum the roll back process has been automated and doesn't require the user to intervene.
Auto-backup/restore
The auto backup/restore feature of eScan is probably the most striking feature that our product has. The basic functionality of this is to create backups of critical files that correspond to the Windows OS. So in the event of an infection the auto backup and restore kicks in and restores critical OS related files that cannot be disinfected. This whole process is automated and requires no user intervention.
eScan Remote Support
Unlike our competitors eScan comes bundled with a special feature called eScan Remote Support. This module basically allows our support team to remotely connect and troubleshoot eScan related issues. The USP of this feature is that it allows most problems to be resolved remotely without having any support technician sent across. So as a user, you save a lot on time as the waiting period is almost negligible. However, do keep in mind that this feature doesn't allow you – the user – to connect to our support department but will require you to call our support department and provide the Unique ID and Password that is generated. For security reasons the password is designed to change each time the eScan Remote Support is invoked.
Virtual Keyboard
User privacy is of our highest concern – reason why eScan 11 features a virtual keyboard. The implementation of a virtual keyboard allows users to enter confidential information such as banking passwords, credit/debit card details without any fear of your online identity being stolen. So even if your system is compromised by an unknown keylogger/spyware, the username and password that is entered during login remains protected.
Gaming Mode
With the inclusion of the gaming mode users can now enjoy uninterrupted gameplay. Having said that, eScan v11 can now automatically switch to gaming mode once an application is run in full screen. For instance – this mode gets enabled the moment movies, games, PowerPoint presentations are run in full screen. In addition to this, as a user you also have the ability to enable this mode manually. This generally helps when you are in the midst of work that is of importance.
Auto download/update of Product
There are a few security companies that don't include product patches or fixes within their updates. Therefore as a user you will need to manually download and install the required patch or fix. This sort of method is actually a concern as most users have the tendency to overlook or even disable such notifications – leaving your security product unpatched and vulnerable to security threats. We at MicroWorld understand the importance of product patches. We therefore include them in the hourly updates that we provided. So if there is a patch available on our server, the built-in updater for eScan downloads and installs the required patch/fix without the need of user interactivity.
Automatic Installation of Windows Critical Security Patches
A salient feature that our product implements is the vulnerability patching of the Windows Operating System. OS Vulnerabilities are the first cause of concern as most hackers scan for loopholes that allow them to bypass already implemented security settings. The implementation of OS patching in eScan v11 allows the application to directly connect to Microsoft's website and download only critical security patches for the Windows OS. This whole process is automated and doesn't require user intervention. So as a user you can be rest assured that your OS stays patched and secured from critical Windows related security vulnerabilities.
www.escanav.com
Anti-Virus
Restore Windows Default Settings
Users can eliminate modifications made to their desktop and background settings in the event of a virus attack. This is made possible by accessing the Restore Windows Default Settings via the Tools menu. Once activated, eScan automatically performs a virus check and then sets the system variables to their default values.
Laptop Battery Power Saving Mode
eScan ISS v11 now features a built–in Battery mode wherein it prevents its own system intensive processes such as scheduled scan from running whenever the laptops power saver mode is detected – thereby increasing the overall runtime of the laptop. This feature is totally automated and requires no user intervention
False Positive measurement of AV product (On-Demand Scan)
AV-Comparatives is an Austrian Non-Profit-Organization, who provide independent Anti-Virus software tests free to the public. It is not only important to measure the products detection capabilities but the overall reliability of the product is of utmost importance. The goal of conducting a False Positive test is to help users differentiate between a good product from a far more superior product. Before proceeding with the tests both programs were updated with the latest signatures. The test conducted show the total number of FP's detected by AVG with respect to eScan. A total of 19 FP's were detected in comparison to just 5 FP's by eScan.
The following chart displays the number of false positives reported by both programs.
18 16 14 12 10 8 6 4 2 0 5 19
eScan AVG
Source: AV-Comparatives.org (August 2010)
Performance Test
The tests were conducted by AV-Comparatives on an Intel Core 2 Duo E8300 PC with 2GB of RAM and SATAII hard disks. The performance tests were first carried on a clean Microsoft Windows 7 Professional (32-bit) system and then with the installed Anti-Virus software. The chart shown below is a summarized score of various tests conducted by AV-Comparatives. Tests include file copying, archiving/unarchiving, encoding/transcoding, installing/uninstalling. In addition to this, tests that were also taken into consideration were file download speed and application launch speed. These tests basically give a brief overview of the affects on system performance by individual Anti-Virus products.
PC Mark Score
99 97 95 93 91 89 87 85 94 97
eScan AVG
Source: AV-Comparatives.org (December 2010)
www.escanav.com
Anti-Virus
Missed Samples (On-Demand scan test)
The graph below is a representation of the number of virus samples overlooked by the Anti-Virus engine. The exact number of virus samples tested are unknown but are well over a few hundred thousand. So missing even 0.1% translates to almost over one thousand of malicious files skipped during the test. As shown eScan has a relatively lower score of missed samples than that of our competitor – AVG. We haven't included WildList virus scores as both security suites scored a full 100% in detection and removal.
1800 1600 1400 1200 1000 800 600 400 200 0 37 0 108 18 754 1695
eScan ISS V11
AVG ISS 2011
Source: VB 100 (December 2010) Worms & Bots Trojans Polymorphic Viruses
Missed Samples (On-access test)
The on-access scan test defines the programs real time protection capabilities, which is probably the most important feature that an Anti-Virus should hone. The following graph shows the number of virus samples missed by both eScan and AVG during the on-access test conducted by Virus Bulletin. Here again the graph speaks about the performance of both the products.
2100 1800 1500 1200 900 600 300 54 0 0 149 1022
1979
54
eScan ISS V11
AVG ISS 2011
Source: VB 100 (December 2010) Worms & Bots Trojans Polymorphic Viruses
www.escanav.com
eScan Internet Security Suite for SOHO vs AVG Internet Security
eScan Internet Security Suite v11
Why do we need Internet Security?
vs AVG Internet Security 2011
Anti-Virus
I
n this day and age data theft is by far a major concern – be it for organizations or even individuals. Now the question that needs to be answered here is, 'What do we understand by data theft?', 'Is it limited to organizations or does it trickle down to end users/consumers too?'. The answer is simple – data that is of importance to you is also mighty important to snoopers too. It could be your school/college project or even specific files and folders. However for organizations, securing every bit is done on a much larger scale. Here it could be anything from financial accounts to intricate details of customers/employees. This is where endpoint protection plays a vital role.
But what do we mean by 'Endpoint Protection'? In computing terms, Endpoint basically refers to ports to which USB and FireWire based devices connect. Therefore, having these ports left open is a concern as there are high chances of data theft. At eScan we understand the needs of not only our enterprise users but also end users who require protection not only from Malware but also from data theft. Not only can users lock down all endpoints but it also prevents malicious programs from executing as and when a pendrive is inserted. Moreover with a large number of people logging into Networking Websites, malware writers are beginning to target sites such as Facebook, Twitter, Orkut (to name a few). For instance, 'My 1st St@tus' scam affected thousands of users on Facebook. However such applications don't just get added to your profile but are generally granted access by the user himself. Once allowed, the application can not only acquire profile details but can also post messages on your behalf. It not only ends there, the application then spreads across the network through all who are linked to your profile. While this particular application doesn't infect the PC, there are many other who direct you to malicious websites that could be home to Trojans and various other malware. To prevent such rogue instances from taking place eScan comes built with a URL filtering module that prevents web pages from getting redirected to malicious websites or URLs. Personal information can include anything from debit/credit card details, passwords for your personal accounts, bank details etc. To help protect your digital identity eScan ISS provides a much needed secure environment in comparison to other Security Suites. This would include certification levels reached by well known testing bodies such as AVComparatives, VirusBulletin and ICSA Labs. However another aspect that also needs to be taken into consideration is the number of false positives detected by the application. Therefore, just having a higher detection rate is never enough but being able to differentiate between malware (known/unknown) and genuine OS files is of utmost importance. The first half of this document provides a brief explanation of the features that are overlooked by our competitor but are made available in eScan ISS v11. The second half displays the effectiveness of the protection offered by both security companies – eScan and AVG.
www.escanav.com
Anti-Virus
Product Name
Manufacturer/Developer VB 100% Certified Unique Technology Proactive Security Real-Time AV Scanning Spyware, KeyLogger, Rootkit Blocker Real-Time File Monitor On-Demand Scan Anti-Spam Firewall (Inbound & Outbound ) Parental Control Malware URL Filter Anti – Phishing Privacy Protection Application Control Endpoint Security History/ Reports Web based Help Files and Folders Protection Asset Management Network Monitoring tool Update rollback Hotfix Rollback Auto download / update software version Auto Backup / Restore Remote Support Application Virtual Keyboard Entertainment/Gaming /Silent mode Creating/Burning Bootable Rescue Disk Automatic Patching of Windows® Operating System Vulnerabilities Laptop/Battery /Power saving mode for schedule scan Advanced Self-Protection Feature Real-Time email Scan Password protection Heuristic Scanning Registration/Activation:(via Web/SMS/eMail/FAX) Grid-based Web Access/Timing
eScan Internet Security Suite v11
MicroWorld
AVG Internet Security 2011
AVG
MicroWorld Winsock Layer
Link Scanner
(Intelligent and Faster) (with Cache Technology) (NILP RBL, SURBL) ,
x
x x x x x x x
Not Documented Not Documented Not Documented
x x x
Windows Based Linux Based
x x
x
www.escanav.com
Anti-Virus
Parental Control
The Internet has always been a one stop junction for a vast number of topics. It has come to such a state that anything and everything is available at the click of a button. However apart from the beneficial aspect it is also home to a magnitude of unwanted information. This would include information on various undesirable aspects such as pornography, drugs and gambling. With the help of this module parents can prevent kids from accessing undesirable sites and even block content that would otherwise damage the normal functionality of the computer. While the module is fully configurable it also features a set of four predefined profiles that can be assigned to users based on their age.
On demand scan (with cache-technology)
eScan features cache technology that creates a record or Whitelist of all files that are scanned on the first run. This ensures faster scan speeds and lower usage of system resources every subsequent runs. Only new or modified files are examined by the scanner.
Grid-based Web Access/Timing
Apart from its Web Filtering/Parental Control module the program also allows you to define time restrictions. Here you can limit the number of hours that a particular user is allowed to access the web or you could simply block web access on certain days.
Privacy Control
This module has been implemented to help keep your data confidential and to minimize the amount of slack from accumulating over a period of time. However when we speak about confidentiality the module is built towards erasing browsing cache, history, cookies, plugins and various other forms of computing slack that gets left behind either during program installation or browsing the web. In addition to this, users can also add their own set of files and folders that need to be cleaned on a regular basis.
Endpoint Security
To prevent data theft, eScan ISS v11 features Endpoint Security that allows blocking of all USB and FireWire ports. This ensures a higher level of privacy and security since the chances of data theft is minimized to a great extent. That apart – Administrators or users can also choose to enable 'Read Only' mode which basically allows users to only read content from USB drives. Other features include – disabling AutoPlay, Password protection and Whitelisting specific USB drives.
Application Control
Another aspect of Endpoint Security is the Application Control feature. This added feature allows you to block applications from running on your PC. It includes pre-defined computer games, instant messengers, video/music players and P2P applications. In addition to this users can also add applications that need blocking.
Web Based Help
An aspect that is also well taken care of is the eScan Wiki which is just a click away on our home page. The eScan Wiki is a comprehensive coverage of all our products. Here users can find product related information, tips as well solution based content that help resolve specific product related issues.
Network Monitoring Tool
In addition to the Firewall, eScan Anti-Virus also features a network monitoring tool that provides a detailed overview of the applications connected to the Internet. Generation of reports is also made available that gives you a detailed summary of the overall data transferred either monthly or weekly. In addition to this, users can also view the top ten applications for the day or you could simply specify the dates that need to be looked into.
www.escanav.com
Anti-Virus
Update/Hotfix Rollback
At the start of every update eScan v11 makes a backup of the current database. So if the event the application downloads an update/hotfix that's corrupt it automatically rolls back to its previous stable database. However to keep user interactivity at its bare minimum the roll back process has been automated and doesn't require the user to intervene.
Auto-backup/restore
The auto backup/restore feature of eScan is probably the most striking feature that our product has. The basic functionality of this is to create backups of critical files that correspond to the Windows OS. So in the event of an infection the auto backup and restore kicks in and restores critical OS related files that cannot be disinfected. This whole process is automated and requires no user intervention.
eScan Remote Support
Unlike our competitors eScan comes bundled with a special feature called eScan Remote Support. This module basically allows our support team to remotely connect and troubleshoot eScan related issues. The USP of this feature is that it allows most problems to be resolved remotely without having any support technician sent across. So as a user, you save a lot on time as the waiting period is almost negligible. However, do keep in mind that this feature doesn't allow you – the user – to connect to our support department but will require you to call our support department and provide the Unique ID and Password that is generated. For security reasons the password is designed to change each time the eScan Remote Support is invoked.
Virtual Keyboard
User privacy is of our highest concern – reason why eScan 11 features a virtual keyboard. The implementation of a virtual keyboard allows users to enter confidential information such as banking passwords, credit/debit card details without any fear of your online identity being stolen. So even if your system is compromised by an unknown keylogger/spyware, the username and password that is entered during login remains protected.
Gaming Mode
With the inclusion of the gaming mode users can now enjoy uninterrupted gameplay. Having said that, eScan v11 can now automatically switch to gaming mode once an application is run in full screen. For instance – this mode gets enabled the moment movies, games, PowerPoint presentations are run in full screen. In addition to this, as a user you also have the ability to enable this mode manually. This generally helps when you are in the midst of work that is of importance.
Auto download/update of Product
There are a few security companies that don't include product patches or fixes within their updates. Therefore as a user you will need to manually download and install the required patch or fix. This sort of method is actually a concern as most users have the tendency to overlook or even disable such notifications – leaving your security product unpatched and vulnerable to security threats. We at MicroWorld understand the importance of product patches. We therefore include them in the hourly updates that we provided. So if there is a patch available on our server, the built-in updater for eScan downloads and installs the required patch/fix without the need of user interactivity.
Automatic Installation of Windows Critical Security Patches
A salient feature that our product implements is the vulnerability patching of the Windows Operating System. OS Vulnerabilities are the first cause of concern as most hackers scan for loopholes that allow them to bypass already implemented security settings. The implementation of OS patching in eScan v11 allows the application to directly connect to Microsoft's website and download only critical security patches for the Windows OS. This whole process is automated and doesn't require user intervention. So as a user you can be rest assured that your OS stays patched and secured from critical Windows related security vulnerabilities.
www.escanav.com
Anti-Virus
Restore Windows Default Settings
Users can eliminate modifications made to their desktop and background settings in the event of a virus attack. This is made possible by accessing the Restore Windows Default Settings via the Tools menu. Once activated, eScan automatically performs a virus check and then sets the system variables to their default values.
Laptop Battery Power Saving Mode
eScan ISS v11 now features a built–in Battery mode wherein it prevents its own system intensive processes such as scheduled scan from running whenever the laptops power saver mode is detected – thereby increasing the overall runtime of the laptop. This feature is totally automated and requires no user intervention
False Positive measurement of AV product (On-Demand Scan)
AV-Comparatives is an Austrian Non-Profit-Organization, who provide independent Anti-Virus software tests free to the public. It is not only important to measure the products detection capabilities but the overall reliability of the product is of utmost importance. The goal of conducting a False Positive test is to help users differentiate between a good product from a far more superior product. Before proceeding with the tests both programs were updated with the latest signatures. The test conducted show the total number of FP's detected by AVG with respect to eScan. A total of 19 FP's were detected in comparison to just 5 FP's by eScan.
The following chart displays the number of false positives reported by both programs.
18 16 14 12 10 8 6 4 2 0 5 19
eScan AVG
Source: AV-Comparatives.org (August 2010)
Performance Test
The tests were conducted by AV-Comparatives on an Intel Core 2 Duo E8300 PC with 2GB of RAM and SATAII hard disks. The performance tests were first carried on a clean Microsoft Windows 7 Professional (32-bit) system and then with the installed Anti-Virus software. The chart shown below is a summarized score of various tests conducted by AV-Comparatives. Tests include file copying, archiving/unarchiving, encoding/transcoding, installing/uninstalling. In addition to this, tests that were also taken into consideration were file download speed and application launch speed. These tests basically give a brief overview of the affects on system performance by individual Anti-Virus products.
PC Mark Score
99 97 95 93 91 89 87 85 94 97
eScan AVG
Source: AV-Comparatives.org (December 2010)
www.escanav.com
Anti-Virus
Missed Samples (On-Demand scan test)
The graph below is a representation of the number of virus samples overlooked by the Anti-Virus engine. The exact number of virus samples tested are unknown but are well over a few hundred thousand. So missing even 0.1% translates to almost over one thousand of malicious files skipped during the test. As shown eScan has a relatively lower score of missed samples than that of our competitor – AVG. We haven't included WildList virus scores as both security suites scored a full 100% in detection and removal.
1800 1600 1400 1200 1000 800 600 400 200 0 37 0 108 18 754 1695
eScan ISS V11
AVG ISS 2011
Source: VB 100 (December 2010) Worms & Bots Trojans Polymorphic Viruses
Missed Samples (On-access test)
The on-access scan test defines the programs real time protection capabilities, which is probably the most important feature that an Anti-Virus should hone. The following graph shows the number of virus samples missed by both eScan and AVG during the on-access test conducted by Virus Bulletin. Here again the graph speaks about the performance of both the products.
2100 1800 1500 1200 900 600 300 54 0 0 149 1022
1979
54
eScan ISS V11
AVG ISS 2011
Source: VB 100 (December 2010) Worms & Bots Trojans Polymorphic Viruses
www.escanav.com
