KEYNOTE TALK AVerify: AN OPEN-SOURCE ANTI-VIRUS - Eicar

More documents

Recommendations

Info

What’s this presentation about? � Mostly AV testing, of course � Just my personal point of view (not my employer’s!) � The reasons behind <strong>AVerify</strong>, and the project goals 2010-05-10 EICAR 2010
A philosophical note � The bad guys are helping each other – sharing/selling techniques, codes, … � Yet the AV ecosystem is fragmented, highly competitive – Non disclosure of information/samples/… gives an edge (temporary) – Cooperation exists on a small scale 2010-05-10 EICAR 2010
Page 1: AVerify Towards verifiable anti-vir
Page 5 and 6: (not my fault) 2010-05-10 EICAR 201
Page 7 and 8: Let’s search “antivirus reviews
Page 9 and 10: “Race Race To Zero” (2008) Chal
Page 11 and 12: The firewall “leak tests” � G
Page 13 and 14: � Low-level access EICAR 2009 200
Page 15 and 16: � Code injection: 2008 versions C
Page 17 and 18: The iAWACS 2009 Challenge � Goal:
Page 19 and 20: The iAWACS 2010 Challenge � Diffe
Page 21 and 22: The Guillermito case � 2001, Tega
Page 23 and 24: More difficulties of testing � Ca
Page 25 and 26: Does CC Certification make sense?
Page 27 and 28: AVerify � Inspired by the EICAR a
Page 29 and 30: Planned tests #1: HIPS features �
Page 31 and 32: Planned tests #3: real-world � Th
Page 33 and 34: An interesting attack � “KHOBE
Page 35 and 36: Scripting a virtual machine � Che
Page 37 and 38: On providing samples � Distributi
Page 39 and 40: The future of AVerify? � Lots of
Page 41: Q&A Thank you for your attention! 2

KEYNOTE TALK AVerify: AN OPEN-SOURCE ANTI-VIRUS - Eicar

Create successful ePaper yourself

Delete template?

Save as template?