Posted by: David Harley | September 7, 2011

Jumping at Shadows*

On Friday, Shadowserver announced on one of its mailing lists that it had overhauled its “AV Test Suite”. Ironically enough, I didn’t see the message until the weekend because I was at a forensics conference talking about (among other things) AV multi-scanning. It would have been a good topic to address in the presentation put together by myself and Virus Total’s Julio Canto, but there you go: my bibliography is littered with papers and presentations that would have been significantly different if I’d been clairvoyantly gifted…

In any case, I was contacted by Kevin Townsend, asking my thoughts on the topic. If you’re interested in those thoughts, and Kevin’s, as well as the thoughts of Panda’s Luis Corrons, Kevin’s article on the topic is here: Shadowserver’s new anti-virus test suite – how good is it?

I’ve also expanded on those thoughts on Shadow boxing for SC Mag.

*A song by Duster Bennet recorded long, long ago by Fleetwood Mac. 🙂

David Harley  CITP FBCS CISSP
ESET Senior Research Fellow

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Categories

%d bloggers like this: