#Austria #Kaspersky #AV-Comparatives #Innsbruck #EDR

Introduction

In an era where cyber threats have become increasingly sophisticated, the importance of robust cybersecurity measures cannot be overstated. Recently, AV-Comparatives, a globally recognized authority in cybersecurity testing, launched its groundbreaking EDR Detection Validation Test, aiming to enhance the evaluation of Endpoint Detection and Response solutions. Notably, Kaspersky’s Next EDR Expert has successfully passed this inaugural assessment, earning a prestigious certification that underscores its capabilities in combating advanced cyber threats.

The Significance of the EDR Detection Validation Test

With the evolution of cyber attacks, including Advanced Persistent Threats (APTs), organizations worldwide face significant challenges in ensuring that their security solutions can effectively detect and respond to such threats. The newly established EDR Detection Validation Test by AV-Comparatives serves as a crucial assessment tool to evaluate the detection abilities of various security solutions, including Endpoint Protection Platforms (EPP), Extended Detection and Response (XDR) systems, and specifically now the EDR solutions.

This rigorous testing method provides Chief Information Security Officers (CISOs) and industry analysts with unbiased data on how well these solutions perform in real-world scenarios, thereby aiding them in making informed decisions regarding their cybersecurity strategies.

Methodology Overview

The EDR Detection Validation Test employs a comprehensive methodology focusing on real-world detection performance in APT scenarios. The test is characterized by:

• - All products being tested in monitoring mode only, disabling any preventive features to gauge detection capabilities accurately.
• - Simulating APT attacks using a variety of Tactics, Techniques, and Procedures (TTPs).
• - Monitoring detection capabilities through active alerts in management consoles or locally looming for immediate reactions.
• - Applying threat-hunting techniques to analyze telemetry data when active alerts are absent, aiming to ensure thorough evaluation.
• - Utilizing the Empire framework for the execution and testing during the initial 2025 phase.

The goal is to create a realistic environment mirroring the complexities of actual cyber attacks, ensuring the products are evaluated against intricate attack vectors efficiently.

Kaspersky Next EDR Expert’s Performance

Kaspersky, a company dedicated to cybersecurity innovation, has embraced transparency through its participation in this pioneering test. The Next EDR Expert solution was rigorously assessed and successfully detected multiple attack scenarios during testing, earning a certification recognized under AV-Comparatives' stringent assessment standards.

Andreas Clementi, CEO and Founder of AV-Comparatives, remarked on the test's importance: "As attackers continuously refine their techniques, organizations must ensure that their security solutions can detect even the most advanced threats. Our new EDR Detection Validation Test provides an objective benchmark, crucial for evaluating these capabilities."

Responding to this significant achievement, Alexander Liskin, Head of Threat Research at Kaspersky, stated, "We value independent professional assessments of our enterprise security solutions, as they provide vital insights into our real-world capabilities and highlight areas for further refinement. Kaspersky Next EDR Expert’s certification reinforces our unwavering commitment to delivering advanced cybersecurity solutions that strengthen organizations' defenses against evolving threats."

Call to Action for Cybersecurity Vendors

AV-Comparatives is encouraging all cybersecurity vendors to engage in the EDR Detection Validation Test. Participating in this evaluation not only showcases a commitment to transparency but also provides crucial insights into product performance against the backdrop of advanced threats. Vendors interested in participating should reach out to AV-Comparatives to arrange their assessments.

Jan Brilke, COO of AV-Comparatives, is available to assist vendors seeking more details about the testing process and how to ensure their solutions meet the demands of contemporary cybersecurity challenges.

About AV-Comparatives

AV-Comparatives is known for its independent evaluations of cybersecurity software aimed at providing accurate analyses and international recognition for performance in real-world environments. Through their extensive testing, they seek to foster a safer digital environment, helping organizations to better protect themselves from evolving cyber threats.

For additional information, please visit AV-Comparatives.