It is easy to maximize malware detection by simply calling everything malware but the high volume of false positives would make this unworkable in a business environment. This multi-technology capability of the ‘fossils’ lies at the heart of SEP14. “If there is a generational difference, it’s that the fossils don’t rely on a single algorithmic approach, any more than they rely on static signatures whereas the new boys tend – in their marketing, at any rate – to promote an either/or view, claiming to be signatureless while promoting ML (for instance) as a technology so obviously perfect that malware just fades away.” ESET senior research fellow David Harley recently did very similar.

‘Single technology’ is likely to emerge as the marketing epithet levied by 1st gen vendors against the new machine learning based new gen vendors, in the same way as some new gen vendors dismiss 1st gen vendors as simply ‘signature detection engines’. In a conversation with SecurityWeek, Symantec’s Global VP of Endpoint Products Javed Hasan explained that SEP14 is built to three requirements: “superior protection, higher performance, and an orchestrated response.” This is achieved by overlaying multiple technologies in an innovative fashion something he noted that ‘single technology’ vendors could not achieve. We can expect more announcements from other 1st gen vendors in the coming months. It is an extensive evolutionary upgrade that verges on a new product. And today, Symantec announced the single largest upgrade to its flagship Symantec Endpoint Protection: SEP14. A few weeks ago, Sophos launched a new product called Intercept X. This bit is false – and we can expect a serious fightback from the 1st gen vendors. Their claim that machine learning is more effective than signature detection in finding zero-day malware is doubly effective: firstly it is true, but secondly it implies that first generation vendors do nothing more than signature detection. In the battle for the endpoint, the new generation security products have been making the most noise. Symantec Unveils Symantec Endpoint Protection 14 With Multi-Layered Protection

Symantec endpoint protection 14 update