TMCnet News
IEEE Supports Cybersecurity Efforts with Launch of Anti-Malware Support ServicePISCATAWAY, N.J. --(Business Wire)-- IEEE (News - Alert), the world's largest professional organization advancing technology for humanity, today announced the launch of IEEE Anti-Malware Support Service (AMSS). A new service from IEEE Standards Association's (IEEE-SA) Industry Connections Security Group (ICSG), AMSS is designed to increase the availability of and access to stronger cryptographic and metadata cybersecurity tools and resources. The IEEE-SA Industry Connections (IC) program provides a place for collaboration on new technologies and standards-related products and services. The IEEE-SA ICSG was formed to bring security vendors together in a cooperative environment to address common issues, such as malware authors hijacking legitimate programs in the software space. "Software packer and obfuscator companies often feel abused by malware authors," said Mark Kennedy, chairman, IEEE-SA Industry Connections Security Group, and distinguished engineer, Symantec. "By working collaboratively, the security industry can apply economic pressure to the malware industry that couldn't be achieved independently. A product of this collaboration, AMSS provides a robust set of shared support services that will help mitigate the spread and effects of rapidly mutating malware threats." The first two AMSS services, the Clean File Metadata eXchange (CMX) and the Taggant System are available today, with additional services planned for the future. These services are the latest to join IEEE's suite of offerings in cybersecurity. AMSS' CMX provides real-time information about clean files using metadata like hashes, filenames, directory paths, signatures, and version information submitted by software providers. With its pass-through model, the system authenticates the data and allows security products and services to retrieve the verified data for use in their own ecosystems. By providing a single, shared repository of critical information, CMX streamlines the process of verifying clean files, reducing false positives detected by anti-virus software and the delay between threat discovery and whitelist updating. The Taggant System places a cryptographically secure marker in packed and obfuscated files generated by commercial software distribtion packer programs. The system can precisely detect which user license key was used to create packed software, including packed malware, making it easier to trace the origin of obfuscated programs. Once detected and identified, malicious license keys can be blacklisted, preventing further use. "The global malware problem continues to escalate in terms of size, complexity, and frequency of attacks," said Dr. Igor Muttik, vice chair, IEEE-SA Industry Connections Security Group, and senior architect, McAfee (News - Alert), Inc. "Malware creators are also becoming increasingly sophisticated in the art of evasion, allowing 0-day and targeted attacks to slip by undetected. To help counter these threats, AMSS gives software providers efficient and cost-effective tools, enabling them to reallocate their valuable resources to other business activities." AMSS is available on an annual subscription basis that provides access to both the CMX and Taggant systems. For more information, please visit the IEEE AMSS web page, standards.ieee.org/amss. To learn more about IEEE-SA, visit us on Facebook (News - Alert) at http://www.facebook.com/ieeesa, follow us on Twitter (News - Alert) at http://www.twitter.com/ieeesa, connect with us on LinkedIn (News - Alert) at http://www.linkedin.com/groups?gid=1791118, or on the Standards Insight Blog at http://www.standardsinsight.com. About the IEEE Standards Association The IEEE Standards Association, a globally recognized standards-setting body within IEEE, develops consensus standards through an open process that engages industry and brings together a broad stakeholder community. IEEE standards set specifications and best practices based on current scientific and technological knowledge. The IEEE-SA has a portfolio of over 900 active standards and more than 500 standards under development. For more information visit http://standards.ieee.org/. About IEEE IEEE, a large, global technical professional organization, is dedicated to advancing technology for the benefit of humanity. Through its highly cited publications, conferences, technology standards, and professional and educational activities, IEEE is the trusted voice on a wide variety of areas ranging from aerospace systems, computers and telecommunications to biomedical engineering, electric power and consumer electronics. Learn more at http://www.ieee.org.
|
