#Austria #Kaspersky #AV-Comparatives #Innsbruck #EDR Test

AV-Comparatives Unveils New EDR Detection Test

On March 23, 2025, AV-Comparatives, a globally esteemed independent cybersecurity testing laboratory, proudly declared the certification of Kaspersky Next EDR Expert. This announcement followed Kaspersky's successful participation in the inaugural Endpoint Detection and Response (EDR) Detection Validation Test. The pilot report detailing this landmark achievement can be found on their official website.

The Necessity of EDR Detection Testing

As cyber threats evolve in complexity and sophistication, organizations face greater challenges in detecting Advanced Persistent Threats (APTs) that can bypass traditional preventive measures. The newly developed EDR Detection Validation Test aims to meet this crucial need, assessing the detection capabilities of enterprise security solutions, specifically Endpoint Protection Platforms (EPP), EDR, and Extended Detection and Response (XDR) systems. This test provides Chief Information Security Officers (CISOs) and industry analysts with unbiased, empirical data to evaluate the effectiveness of these solutions in real-world scenarios.

Methodology Overview

The EDR Detection Validation Test evaluates real detection performance in APT scenarios, where all products are configured solely in monitoring mode (preventive functions disabled). Key components of the test include:

• - Simulation of APT attacks using various Tactics, Techniques, and Procedures (TTPs).
• - Monitoring for detections through active alerts in the management console or locally.
• - Application of threat-hunting techniques to analyze telemetry data when immediate alerts are not present.
• - Utilization of the Empire Framework in the early 2025 phase for execution and evaluation.

This comprehensive methodology ensures that the evaluation accurately reflects the product's ability to detect complex attack vectors.

Statements from Leaders

Andreas Clementi, CEO and Founder of AV-Comparatives, remarked, "As attackers continuously refine their techniques, businesses must ensure that their security solutions can detect the most advanced threats. Our new EDR Detection Validation Test offers an objective measure for assessing these capabilities. Kaspersky's participation in this initial evaluation highlights the company's commitment to transparency and the ongoing advancement of cybersecurity."

Kaspersky’s Head of Threat Research, Alexander Liskin, commented, "We value independent professional evaluations of our enterprise security solutions as they provide insights into real-world capabilities and help identify opportunities for further enhancements. The new EDR Detection Validation Certification Test from AV-Comparatives represents one of those evaluations, and we're proud to be the first vendor to embrace this challenge. Kaspersky Next EDR Expert successfully identified multiple attack techniques during the rigorous testing process and achieved certification status, underscoring our commitment to delivering advanced and effective cybersecurity solutions that help businesses strengthen their defenses against evolving threats."

Kaspersky Next EDR Expert Performance

Kaspersky's involvement in this pilot test demonstrates its dedication to transparency and continuous improvement. The Next EDR Expert solution successfully detected several techniques employed in the simulated attack scenarios, earning certification based on AV-Comparatives' stringent standards. This performance illustrates Kaspersky's commitment to providing robust detection capabilities against sophisticated threats.

An Invitation to Cybersecurity Providers

AV-Comparatives extends an invitation to all cybersecurity product vendors to participate in the EDR Detection Validation Test. Engaging in this evaluation not only demonstrates a commitment to transparency but also provides valuable insights into product performance against advanced threats. By participating, vendors assure that their solutions meet the evolving security requirements of businesses worldwide. Interested providers are encouraged to contact AV-Comparatives to arrange their evaluation.

For further inquiries, Jan Brilke, COO of AV-Comparatives, is available for more information.
Visit AV-Comparatives' website for more details about the certification and testing processes. This certification serves as a valuable quality mark for software performance globally, and its impact on enhancing enterprise cybersecurity cannot be overstated.