This paper describes the results of a thorough examination of Sophos Antivirus internals. The author presents a technical analysis of claims made by the vendor, and publishes the tools and reference material required to reproduce their results. Furthermore, they examine the product from the perspective of a vulnerability researcher, exploring the rich attack surface exposed, and demonstrating weaknesses and vulnerabilities.
You can download it from the following link: https://packetstormsecurity.com/files/download/103727/Sophail.pdf
Source: https://packetstormsecurity.com/files/103727/Sophail-A-Critical-Analysis-Of-Sophos-Antivirus.html