Security experts gather in Europe

Posted by   Virus Bulletin on   May 7, 2008

Anti-malware insights pooled at AMTSO, CARO and EICAR meetings.

Many of the world's leading anti-malware and security experts came together in the past week, at a string of meetings and conferences being held in Europe. Global bodies the Anti-Malware Testing Standards Organisation (AMTSO) and the Computer Anti-Virus Researchers' Organization (CARO), and the pan-European experts group EICAR, all held meetings to discuss the latest developments in the battle against the malware menace.

The AMTSO group, formed earlier this year at a meeting in Bilbao, came together for a second time in Amsterdam last week, to discuss ways of improving security testing to better reflect the evolving capabilities of security software. An even larger number of delegates - representing the security industry, testing bodies, media organisations and academia - shared their knowledge and ideas in hopes of ensuring higher standards of testing, enabling the public to gain a clearer insight into the performance of security software.

CARO The veteran CARO organisation played hosts to a conference dedicated to the subject of testing held in Reykjavik, Iceland last year, during which the movement to found AMTSO began to take shape. This year CARO held a second highly focused two-day workshop, also in Amsterdam following on from the AMTSO meeting. Attended by over 120 delegates from around the world, the conference looked in detail at the problems presented by packed, encrypted and obfuscated malicious code.

The proceedings were opened with a keynote speech from Paul Ducklin of Sophos, providing an overview of the problems posed by packing and obfuscation. Over the following days, experts from many of the leading security firms as well as independent organisations presented their own insights into the issues, looking at anti-analysis techniques used in web code as well as executables, among them Roger Thompson of Exploit Prevention Labs (now part of AVG) fame. Ilfak Guilfanov, creator of the IDA Pro disassembler, widely considered a vital tool in malware analysis, provided a highlight for many delegates with his talk, looking at the configurability of his software to deal with deliberate obscurity. In between the presentations, the usual social events provided more opportunities for networking, debate and knowledge-sharing.

Many of the delegates then moved on to France, where the annual EICAR conference was held after a hiatus in 2007. Over several days, a wide range of papers were presented by both academics and industry experts covering various aspects of malware behaviour and analysis, botnets, software vulnerabilities and cryptography. EICAR's Eddy Willems will provide a detailed look at the event in the next issue of Virus Bulletin, available to subscribers only; subscription information is here.

Later in the year the 2008 Virus Bulletin conference will be held in Ottawa, Canada. The VB2008 conference programme boasts an exceptional line-up of expert speakers and caters for both technical and corporate audiences. Presentations will cover subjects including: sample sharing, anti-malware testing, automated analysis, rootkits, spam and botnet tracking techniques, corporate policy, business risk and more. VB2008 takes place 1-3 October 2008, the full programme and online registration can be found here.

Posted on 07 May 2008 by Virus Bulletin

twitter.png
fb.png
linkedin.png
hackernews.png
reddit.png

 

Latest posts:

VB2019 paper: DNS on fire

In a paper presented at VB2019, Cisco Talos researchers Warren Mercer and Paul Rascagneres looked at two recent attacks against DNS infrastructure: DNSpionage and Sea Turtle. Today we publish their paper and the recording of their presentation.

German Dridex spam campaign is unfashionably large

VB has analysed a malicious spam campaign targeting German-speaking users with obfuscated Excel malware that would likely download Dridex but that mostly stood out through its size.

Paper: Dexofuzzy: Android malware similarity clustering method using opcode sequence

We publish a paper by researchers from ESTsecurity in South Korea, who describe a fuzzy hashing algorithm for clustering Android malware datasets.

Emotet continues to bypass many email security products

Having returned from a summer hiatus, Emotet is back targeting inboxes and, as seen in the VBSpam test lab, doing a better job than most other malicious campaigns at bypassing email security products.

VB2019 paper: We need to talk - opening a discussion about ethics in infosec

Those working in the field of infosec are often faced with ethical dilemmas that are impossible to avoid. Today, we publish a VB2019 paper by Kaspersky researcher Ivan Kwiatkowski looking at ethics in infosec as well as the recording of Ivan's…

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.