Security experts gather in Europe

Posted by   Virus Bulletin on   May 7, 2008

Anti-malware insights pooled at AMTSO, CARO and EICAR meetings.

Many of the world's leading anti-malware and security experts came together in the past week, at a string of meetings and conferences being held in Europe. Global bodies the Anti-Malware Testing Standards Organisation (AMTSO) and the Computer Anti-Virus Researchers' Organization (CARO), and the pan-European experts group EICAR, all held meetings to discuss the latest developments in the battle against the malware menace.

The AMTSO group, formed earlier this year at a meeting in Bilbao, came together for a second time in Amsterdam last week, to discuss ways of improving security testing to better reflect the evolving capabilities of security software. An even larger number of delegates - representing the security industry, testing bodies, media organisations and academia - shared their knowledge and ideas in hopes of ensuring higher standards of testing, enabling the public to gain a clearer insight into the performance of security software.

CARO The veteran CARO organisation played hosts to a conference dedicated to the subject of testing held in Reykjavik, Iceland last year, during which the movement to found AMTSO began to take shape. This year CARO held a second highly focused two-day workshop, also in Amsterdam following on from the AMTSO meeting. Attended by over 120 delegates from around the world, the conference looked in detail at the problems presented by packed, encrypted and obfuscated malicious code.

The proceedings were opened with a keynote speech from Paul Ducklin of Sophos, providing an overview of the problems posed by packing and obfuscation. Over the following days, experts from many of the leading security firms as well as independent organisations presented their own insights into the issues, looking at anti-analysis techniques used in web code as well as executables, among them Roger Thompson of Exploit Prevention Labs (now part of AVG) fame. Ilfak Guilfanov, creator of the IDA Pro disassembler, widely considered a vital tool in malware analysis, provided a highlight for many delegates with his talk, looking at the configurability of his software to deal with deliberate obscurity. In between the presentations, the usual social events provided more opportunities for networking, debate and knowledge-sharing.

Many of the delegates then moved on to France, where the annual EICAR conference was held after a hiatus in 2007. Over several days, a wide range of papers were presented by both academics and industry experts covering various aspects of malware behaviour and analysis, botnets, software vulnerabilities and cryptography. EICAR's Eddy Willems will provide a detailed look at the event in the next issue of Virus Bulletin, available to subscribers only; subscription information is here.

Later in the year the 2008 Virus Bulletin conference will be held in Ottawa, Canada. The VB2008 conference programme boasts an exceptional line-up of expert speakers and caters for both technical and corporate audiences. Presentations will cover subjects including: sample sharing, anti-malware testing, automated analysis, rootkits, spam and botnet tracking techniques, corporate policy, business risk and more. VB2008 takes place 1-3 October 2008, the full programme and online registration can be found here.

Posted on 07 May 2008 by Virus Bulletin

twitter.png
fb.png
linkedin.png
hackernews.png
reddit.png

 

Latest posts:

VB2018 paper: Internet balkanization: why are we raising borders online?

At VB2018 in Montreal, Ixia researcher Stefan Tanase presented a thought-provoking paper on the current state of the Internet and the worrying tendency towards raising borders and restricting the flow of information. Today we publish both his paper…

The malspam security products miss: banking and email phishing, Emotet and Bushaloader

The set-up of the VBSpam test lab gives us a unique insight into the kinds of emails that are more likely to bypass email filters. This week we look at the malspam that was missed: banking and email phishing, Emotet and Bushaloader.

VB2018 paper: Where have all the good hires gone?

The cybersecurity skills gap has been described as one of the biggest challenges facing IT leaders today. At VB2018 in Montreal, ESET's Lysa Myers outlined some of the things the industry can do to help address the problem. Today we publish Lysa's…

Preview: Nullcon 2019

We look forward the Nullcon 2019 conference in Goa, India, at which VB Editor Martijn Grooten will give a talk on the state of malware.

From Amazon to Emotet: a look at those phishing and malware emails that bypassed email security products

We see a lot of spam in the VBSpam test lab, and we also see how well such emails are being blocked by email security products. Recently some of the emails that bypassed security products included a broken Amazon phishing campaign, a large fake UPS…

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.