|[July 01, 2014]
IEEE Supports Cybersecurity Efforts with Launch of Anti-Malware Support Service
PISCATAWAY, N.J. --(Business Wire)--
IEEE (News - Alert), the world's largest professional organization advancing technology
for humanity, today announced the launch of IEEE Anti-Malware Support
Service (AMSS). A new service from IEEE Standards Association's
(IEEE-SA) Industry Connections Security Group (ICSG), AMSS is designed
to increase the availability of and access to stronger cryptographic and
metadata cybersecurity tools and resources.
The IEEE-SA Industry Connections (IC) program provides a place for
collaboration on new technologies and standards-related products and
services. The IEEE-SA ICSG was formed to bring security vendors together
in a cooperative environment to address common issues, such as malware
authors hijacking legitimate programs in the software space.
"Software packer and obfuscator companies often feel abused by malware
authors," said Mark Kennedy, chairman, IEEE-SA Industry Connections
Security Group, and distinguished engineer, Symantec. "By working
collaboratively, the security industry can apply economic pressure to
the malware industry that couldn't be achieved independently. A product
of this collaboration, AMSS provides a robust set of shared support
services that will help mitigate the spread and effects of rapidly
mutating malware threats."
The first two AMSS services, the Clean File Metadata eXchange (CMX) and
the Taggant System are available today, with additional services planned
for the future. These services are the latest to join IEEE's suite of
offerings in cybersecurity.
AMSS' CMX provides real-time information about clean files using
metadata like hashes, filenames, directory paths, signatures, and
version information submitted by software providers. With its
pass-through model, the system authenticates the data and allows
security products and services to retrieve the verified data for use in
their own ecosystems. By providing a single, shared repository of
critical information, CMX streamlines the process of verifying clean
files, reducing false positives detected by anti-virus software and the
delay between threat discovery and whitelist updating.
The Taggant System places a cryptographically secure marker in packed
and obfuscated files generated by commercial software distribtion
packer programs. The system can precisely detect which user license key
was used to create packed software, including packed malware, making it
easier to trace the origin of obfuscated programs. Once detected and
identified, malicious license keys can be blacklisted, preventing
"The global malware problem continues to escalate in terms of size,
complexity, and frequency of attacks," said Dr. Igor Muttik, vice chair,
IEEE-SA Industry Connections Security Group, and senior architect,
McAfee (News - Alert), Inc. "Malware creators are also becoming increasingly
sophisticated in the art of evasion, allowing 0-day and targeted attacks
to slip by undetected. To help counter these threats, AMSS gives
software providers efficient and cost-effective tools, enabling them to
reallocate their valuable resources to other business activities."
AMSS is available on an annual subscription basis that provides access
to both the CMX and Taggant systems. For more information, please visit
the IEEE AMSS web page, standards.ieee.org/amss.
To learn more about IEEE-SA, visit us on Facebook (News - Alert) at http://www.facebook.com/ieeesa,
follow us on Twitter (News - Alert) at http://www.twitter.com/ieeesa,
connect with us on LinkedIn (News - Alert) at http://www.linkedin.com/groups?gid=1791118,
or on the Standards Insight Blog at http://www.standardsinsight.com.
About the IEEE Standards Association
The IEEE Standards Association, a globally recognized standards-setting
body within IEEE, develops consensus standards through an open process
that engages industry and brings together a broad stakeholder community.
IEEE standards set specifications and best practices based on current
scientific and technological knowledge. The IEEE-SA has a portfolio of
over 900 active standards and more than 500 standards under development.
For more information visit http://standards.ieee.org/.
IEEE, a large, global technical professional organization, is dedicated
to advancing technology for the benefit of humanity. Through its highly
cited publications, conferences, technology standards, and professional
and educational activities, IEEE is the trusted voice on a wide variety
of areas ranging from aerospace systems, computers and
telecommunications to biomedical engineering, electric power and
consumer electronics. Learn more at http://www.ieee.org.
[ InfoTech Spotlight's Homepage ]