Anti-Malware -- Security Features Checklist
Core Security Functionality
- Rootkit Detection
- Virus and Worm Detection
- Trojan Horse Removal
- Adware and Spyware Detection
- Dual Use Software
- Detection or Containment
- Database Updates
- Behaviour-based Recognition
- Scanning Options
- Static Signature Detection
- Digital Signatures
Conformance to Protocol Standards
- Scanning Incoming Traffic
Authentication
- Password Management
- Password Compatibility
- Password Lockout
Cryptographic Standards
Encryption Algorithms
- Advanced Encryption Standard (AES)
- Triple- Data Encryption Standard (3DES)
Key Establishment Algorithms
- Rivest, Shamir, Adleman (RSA)
- Other algorithms based on exponentiation of finite fields
- Key Exchange Algorithm (KEA)
- Elliptic Curve algorithms
Digital Signature Algorithms
- RSA
- Digital Signature Algorithm (DSA)
- Other algorithms based on exponentiation of finite fields
- Elliptic Curve Digital Signature Algorithm (ECDSA)
Hashing Algorithms
- SHA-1
- SHA-224
- SHA-256
- SHA-384
- SHA-512
Cryptoperiod
- Should be appropriate for the algorithm in use
Assurance Standards
- Major Antivirus Certifications
Configurability
- Changeable Default Values
- Logging
Usability
- Configuration by Users
- Authentication by Users
- Maintenance by Administrators
- Failed logins
- Reconfiguration by Administrators
- False alarm
- Product compatibility
- Processing time
Manageability
- Central Management
- Remote Management
- Authentication of Management Traffic
- Encryption of Management Traffic
- Product Removal
Scalability
- Degree of Scalability
www.cse-cst.gc.ca itsclientservices@cse-cst.gc.ca 613-991-7654