Re: Re[2]: another VX site?

[Nick FitzGerald <nick () virus-l demon co uk>]

Pierre Vandevenne to someone:

> > > Hey, that's a great idea. Why didn't anyone think of it before!
> OS> I am well aware of CME-

CME is NOTHING like what the OP asked for...

In fact, just like CVE, it is specifically, by design _NOT_ a naming 
convention...

> There were earlier attempts. That one for example
>
> A New Virus Naming Convention
> At a CARO meeting in 1991, a committee was formed with the objective
> of reducing the confusion in virus naming.  This committee consisted
> of Fridrik Skulason (Virus Bulletin's technical editor) Alan Solomon
> (S&S International) and Vesselin Bontchev (University of Hamburg).
>
> http://downloads.securityfocus.com/library/naming.txt

FWIW (and I know this is _fun_sec and malware naming is anything but 
fun...), that initiative continues and is, in its contemporary form 
represented thus:

   http://www.people.frisk-software.com/~bontchev/papers/naming.html

That is the (updated) version of Vess' VB2005 paper and, for now, the 
official home of the CARO naming scheme.


Regards,

Nick FitzGerald

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.