Forest Global Training Partners

Cyber Risks · Krebs on Security

Mal Con: A Call for ‘Ethical Malcoding’

Summary: MalCon, a conference in Mumbai on Dec. 3 and again at Clubhack 2010 in Pune on Dec. 5, was organized to bring malware writers and security researchers onto a common platform, with its call for papers accepting working malware, novel phishing kits, botnets, mobile malware, and anti-virus exploitation techniques. Coordinator Rajshekhar Murthy said the goal was to foster malcode creation for 'ethical malcoding,' while Bruce Schneier said he disagreed, arguing the bad guys already produce more than enough malware to stimulate research.

Key Takeaway: The organizer's argument is that anti-malware vendors are a handful of companies reacting to a million new malwares a year, and that closing that gap requires sitting malware authors next to defenders - a proposition Schneier rejected outright, and one that leaves a security leader weighing whether proximity to malware authors buys proactive defense or just better-armed attackers.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related