[funsec] another VX site?

Nick FitzGerald nick at virus-l.demon.co.uk
Sat Jan 7 17:31:08 CST 2006


Pierre Vandevenne to someone:

> >> Hey, that's a great idea. Why didn't anyone think of it before!
> OS> I am well aware of CME-

CME is NOTHING like what the OP asked for...

In fact, just like CVE, it is specifically, by design _NOT_ a naming 
convention...

> There were earlier attempts. That one for example
> 
> A New Virus Naming Convention
> At a CARO meeting in 1991, a committee was formed with the objective
> of reducing the confusion in virus naming.  This committee consisted
> of Fridrik Skulason (Virus Bulletin's technical editor) Alan Solomon
> (S&S International) and Vesselin Bontchev (University of Hamburg).
> 
> http://downloads.securityfocus.com/library/naming.txt

FWIW (and I know this is _fun_sec and malware naming is anything but 
fun...), that initiative continues and is, in its contemporary form 
represented thus:

   http://www.people.frisk-software.com/~bontchev/papers/naming.html

That is the (updated) version of Vess' VB2005 paper and, for now, the 
official home of the CARO naming scheme.


Regards,

Nick FitzGerald



More information about the funsec mailing list