


Files which were digitally signed are considered more important. In order to give more information to the user about the false alarms, we try to rate the prevalence of the false alarms. I t doesn’t mean the product with 3 FPs doesn’t have more than 3 FPs globally, but it is the relative number that is important. 2 0 FPs and another only 3, it is likely that the first product is more prone to FPs than the other. If, when using su ch a set, one product has e.g. What can be done, and is reasonable, is to create and use a set of clean files which is independently collected. There is no complete collection of all legitimate files that exist, and so no “ultimate” test of FPs can be done. distinguish clean files from malicious files, despite their context. False Positives Tests measure which programs do best in this respect, i.e. No product is immune from false positives (FPs), but some produce more than others. One aspect of reliability is the ability to recognize clean files as such, and not to produce false alarms (false positives). In AV testing, it is important to measure not only detection capabilities but also reliability. This report is an appendix to the Malware Protection Test March 2020 listing details about the discovered False Alarms.
