KEYNOTE TALK AVerify: AN OPEN-SOURCE ANTI-VIRUS - Eicar

Planned tests #3: real-world
� This is slightly harder:
malware
– Find a new threat after it is released
– Repeatedly scan with each anti-virus to determine the
reaction time of AV companies
� Or use any older but common threat
� Install the threat, create a snapshot
– Determine how it installs and stays persistent
– Attempt to disinfect with each AV
– Use a LiveCD to check for successful disinfection on
disk
2010-05-10 EICAR 2010