Abstract
Current commercial anti-malware products fail
to guarantee a 100% detection and prevention of malware.
This paper proposes an evaluation framework called ATE
(Anti-malware Technique Evaluator) that can be used to
evaluate commercial anti-malware products. ATE identifies the
vulnerabilities in anti-malware products by providing a set of
requirements that must be fulfilled by the anti-malware product
being evaluated. The ATE requirements used for evaluating
anti-malware products go beyond the usual false positives, false
negative, performance etc requirements employed by current
anti-malware product evaluations.