Subscribe to
Computerworld Antivirus vendors slam Defcon virus contest
Hate for a competition with 'most deserving of beer' as a category
Active Comments
April 26, 2008 (IDG News Service) There will be a new contest at the Defcon hacker conference this August, one that antivirus vendors already hate.
Called "Race to Zero," the contest will invite Defcon hackers to find new ways of beating antivirus software. Contestants will get some sample virus code that they must modify and try to sneak past the antivirus products.
Awards will be given for "Most elegant obfuscation," "Dirtiest hack of an obfuscation," "Comedy value" and "Most deserving of beer," contest organizers said.
The contest was announced Friday. Security vendors began panning it immediately, saying it will simply help the bad guys learn some new tricks.
"It will do more harm than good," said Paul Ferguson, a researcher at antivirus vendor TrendMicro. "Responsible disclosure is one thing, but now actually encouraging people to do this as a contest is a little over the top."
Some compared the contest to a controversial 2006 Consumer Reports review of antivirus software. In that article, the magazine created 5,500 new virus samples based on existing malware, and it was roundly criticized by antivirus vendors for contributing to the rapidly expanding list of known malware.
Security companies are already having difficulty keeping up with the torrent of new malware.
With antivirus vendors already processing some 30,000 samples each day, there's no need for any more samples, said Roger Thompson, chief research officer at AVG Technologies. "It's hard to see an upside for encouraging people to write more viruses," he said via instant message. "It's a dumb idea."
Contest organizers say that they're trying to help computer users understand just how much effort is required to skirt antivirus products. "The point behind the contest is to illustrate that antivirus [technology] alone is not a complete defense against malware," said one of the contest's organizers, who identified himself only as "Rich," in an e-mail message.
The Race to Zero sponsors hope to present the contest results during Defcon, Rich said.
The contest is not organized by Defcon, but is one of the unofficial events that the show's organizers have encouraged attendees to arrange.
Defcon will run Aug. 8 to 10 at the Riviera Hotel & Casino in Las Vegas.
Reprinted with permission from
IDG.netStory copyright 2008 International Data Group. All rights reserved.
Today's Top Stories
Resource Alerts
Webcasts
Real-time collaboration and development with IBM® Rational® Team Concert streamlines any project
Editor's Picks
Clues point to Jan. 13 release of Windows 7 beta
Microsoft releases Vista SP2 beta
Obama's DHS pick may find support for raising H-1B cap at confirmation hearing
IBM wants info from Apple execs in Papermaster case
License server glitch exposes SonicWall users to e-mail security threats
Report: Former AOL chief exec tries to raise funds to buy Yahoo
 In SecurityStripping away the trappings of applications, systems and networks, information is the core asset of most organizations. Our columnist describes how asserting the importance of information governance is crucial to making that asset tangible, addressable and protected. Click here to read the latest column by Jon Espenschied |
Protecting Exchange While it was once just a convenient way for employees to communicate internally, today e-mail systems like Exchange are tightly integrated with other business applications and are one of the primary methods for communicating with current and prospective customers. Protecting Exchange against costly downtime has become a top priority for more IT departments. So how do you ensure that your Exchange environment is always protected?Download this white paper now! 
|
 The Spy FilesFor Congress to do anything that helps protect consumers and the critical Internet infrastructure as a whole, it must pass laws that require proactive processes to protect computers, not that tell people how to deal with the resulting mess, says Ira Winkler. Click here to read the latest column by Ira Winkler |
| White Papers  Read up on the latest ideas and technologies from companies that sell hardware, software and services. | ||||||
|
