full-disclosure - Show me the Virrii!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: gszappanos at virusbuster.hu (Szappanos Gabor (VBuster))
Subject: Show me the Virrii! 

>"Research" isn't what you're doing when you're planning to figure out
how to
>stop the *next* new attack by studying the terabytes of examples of how
that
>idea didn't stop the attack last time.

No actually research is finding generic signatures for larger virus/wom
families, generic detection for virus/worm types, implementing emulated
Win32/DOS environment within the virus scanner to analyse the behaviour
of a program. Something like this. Not entirely useless. Recently posted
a couple of links that investigate the efficiency of these methods. The
results are still far from being assuring, but saying that these methods
are useless is ignoring tha facts.

>What you're doing there is milking a cash cow rather than finding a new
way to
>actually fix the problem right.

Exactly. Like onvincing the people that writing and distributing viruses
is a bad thing. But this smells like a flame.

Regards,
Gabor Szappanos