The AV-TEST laboratory has started a new series of tests for Android security apps for companies. In the first test, AV-TEST uses three test candidates to present the scope and procedure for the future test series.
Time and again, protection apps for companies were also occasionally checked in the tests for Android security apps. However, the perfect test environment for examining private apps is not particularly ideal for corporate security apps. AV-TEST has recognized this problem and is therefore separating the tests of Android security apps for private users and companies. The test structure remains relatively the same; here is an overview.
Tests for protection, system load and usability
As in all other tests, the laboratory checks the three areas of protection, system load and usability. In terms of protection, every protection app must detect harmful apps. With the system load, the processor and battery load is determined by the apps. The usability point checks the behavior of the business security apps in relation to normal, harmless apps. The laboratory awards up to 6 points for each test area. In total, a protection app can achieve up to 18 points.
Protective effect in the test
When examining the protective effect for company apps, the laboratory relies on the same system as for apps for private users. For the real-time test, over 3.100 brand new, malicious apps were filtered from the Internet. In the second test phase, with the reference set, the laboratory tests the protection apps for companies with over 3.000 particularly dangerous apps that are up to 4 weeks old. At this point there are small differences to the tests for private users: there are usually few or no infected game apps in the test sets, as these are rarely installed on company smartphones. Instead, there are more programs in the sets that usually end up on company smartphones. Conversely, the test with protection tools for private users naturally checks more contaminated apps from the game area.
The tested apps from ESET, Sophos and Symantec show very good results. The ESET app Endpoint Security finished both tests with 100 percent detection each. Symantec's SEP Mobile succeeds in 100 percent recognition in the reference set. In the real-time test, the app achieved a very good 99,9 percent. Sophos Intercept X for Mobile completed both test areas with 99,9 percent detection each.
System load at a glance
Of course, the system load caused by an endpoint security app is an important factor. When employees are on the move, for example in the field, the battery of the smartphone or tablet has to hold out. If the protection app works constantly, requires a lot of CPU load or is constantly reloading data, this shortens the battery life. The laboratory also checks these points in the test for every security app for companies. The three apps from ESET, Sophos and Symantec received consistently good marks and the top score of 6 points.
Usability: what about false positives?
A particularly interesting topic are false positives that security apps can trigger. This is a difficult case, especially on mobile devices, as the system administrator is usually not around and cannot help. For this test, the laboratory sent almost 1.400 harmless business and office apps from the Google Play Store to the test devices. Every company protection app should then correctly recognize that the apps are harmless and neither block nor delete them. None of the three endpoint security apps we tested made no mistakes here.
The difference in this company test compared to the one for private users: only apps from the Google Play Store are installed and not from other sources. This is usually not permitted with mobile devices in companies. Furthermore, the selection of harmless apps is also geared towards office and business applications. Game and entertainment apps don't play a role here.
More security for mobile systems
Many companies like to secure their desktops, servers and notebooks with endpoint security solutions. Too often, mobile devices with Android have been neglected. Every well-known provider of security solutions also has Android apps in their portfolio for complete protection. The risk for a company increases, especially when employees do not use company devices provided, but use their own mobile device. Even with BYOD (bring your own device), a private employee device can be secured as it should be. The endpoint security apps also monitor many other functions on the devices and often provide rules. In terms of protection, system load and usability, the currently tested security apps from the corporate solutions from ESET, Sophos and Symantec are a safe bet. The apps completed all test areas with the maximum score of 6 and thus achieved the top score of 18 points.
About the AV-TEST Institute
AV-TEST GmbH is an independent provider of services in the field of IT security and anti-virus research with a focus on the identification and analysis of the latest malware and its use in comprehensive comparative tests.
The fact that the test data is up-to-date enables the quick-reacting analysis of new malware, the early detection of virus trends and the investigation and certification of IT security solutions. The results of the AV-TEST Institute represent an exclusive information base and serve manufacturers for product optimization, specialist magazines for the publication of results and end customers for orientation in product selection.
The company AV-TEST has been operating in Magdeburg since 2004 and employs more than 30 people with profound specialist and practical experience. The laboratories are equipped with 300 client and server systems in which more than 2.500 terabytes of self-determined test data of harmful and harmless information are stored and processed. Further information can be found at https://www.av-test.org