Security experts gather in Europe

Posted by   Virus Bulletin on   May 7, 2008

Anti-malware insights pooled at AMTSO, CARO and EICAR meetings.

Many of the world's leading anti-malware and security experts came together in the past week, at a string of meetings and conferences being held in Europe. Global bodies the Anti-Malware Testing Standards Organisation (AMTSO) and the Computer Anti-Virus Researchers' Organization (CARO), and the pan-European experts group EICAR, all held meetings to discuss the latest developments in the battle against the malware menace.

The AMTSO group, formed earlier this year at a meeting in Bilbao, came together for a second time in Amsterdam last week, to discuss ways of improving security testing to better reflect the evolving capabilities of security software. An even larger number of delegates - representing the security industry, testing bodies, media organisations and academia - shared their knowledge and ideas in hopes of ensuring higher standards of testing, enabling the public to gain a clearer insight into the performance of security software.

CARO The veteran CARO organisation played hosts to a conference dedicated to the subject of testing held in Reykjavik, Iceland last year, during which the movement to found AMTSO began to take shape. This year CARO held a second highly focused two-day workshop, also in Amsterdam following on from the AMTSO meeting. Attended by over 120 delegates from around the world, the conference looked in detail at the problems presented by packed, encrypted and obfuscated malicious code.

The proceedings were opened with a keynote speech from Paul Ducklin of Sophos, providing an overview of the problems posed by packing and obfuscation. Over the following days, experts from many of the leading security firms as well as independent organisations presented their own insights into the issues, looking at anti-analysis techniques used in web code as well as executables, among them Roger Thompson of Exploit Prevention Labs (now part of AVG) fame. Ilfak Guilfanov, creator of the IDA Pro disassembler, widely considered a vital tool in malware analysis, provided a highlight for many delegates with his talk, looking at the configurability of his software to deal with deliberate obscurity. In between the presentations, the usual social events provided more opportunities for networking, debate and knowledge-sharing.

Many of the delegates then moved on to France, where the annual EICAR conference was held after a hiatus in 2007. Over several days, a wide range of papers were presented by both academics and industry experts covering various aspects of malware behaviour and analysis, botnets, software vulnerabilities and cryptography. EICAR's Eddy Willems will provide a detailed look at the event in the next issue of Virus Bulletin, available to subscribers only; subscription information is here.

Later in the year the 2008 Virus Bulletin conference will be held in Ottawa, Canada. The VB2008 conference programme boasts an exceptional line-up of expert speakers and caters for both technical and corporate audiences. Presentations will cover subjects including: sample sharing, anti-malware testing, automated analysis, rootkits, spam and botnet tracking techniques, corporate policy, business risk and more. VB2008 takes place 1-3 October 2008, the full programme and online registration can be found here.

Posted on 07 May 2008 by Virus Bulletin

twitter.png
fb.png
linkedin.png
hackernews.png
reddit.png

 

Latest posts:

Nominations opened for sixth Péter Szőr Award

Virus Bulletin is seeking nominations for the sixth annual Péter Szőr Award.

Haroon Meer and Adrian Sanabria to deliver VB2019 closing keynote

New additions to the VB2019 conference programme include a closing keynote address from Thinkst duo Haroon Meer and Adrian Sanabria and a talk on attacks against payment systems.

Free VB2019 tickets for students

Virus Bulletin is excited to announce that, thanks to generous sponsorship from Google Android, we are able to offer 20 free tickets to students who want to attend VB2019.

VB2018 paper: Lazarus Group: a mahjong game played with different sets of tiles

The Lazarus Group, generally linked to the North Korean government, is one of the most notorious threat groups seen in recent years. At VB2018 ESET researchers Peter Kálnai and Michal Poslušný presented a paper looking at the group's various…

Book your VB2019 ticket now for a chance to win a ticket for BSides London

Virus Bulletin is proud to sponsor this year's BSides London conference, which will take place next week, and we have a number of tickets to give away.

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.