‘Real-world’ testing, also known as dynamic testing or live threat exposure is the most realistic kind of malware test. The most simple example would be pointing test systems for each antivirus suite at a website known to attempt a drive-by download or opening an email with an infected attachment and seeing how each antivirus suite responds. In practice, testing houses often use more reproduceable systems, for example by recording and using replays of attacks using an HTTP/S traffic capture tool such as Fiddler2. The accurate collection of logs and recording of results, and the use of a transparent methodology, is critical to the reliability and trustworthiness of such tests, leading to the formation of bodies such as AMTSO.