|
| |
Anti-Virus
Information Exchange Network |
Background
At the Virus Bulletin 2000 Conference in Orlando, Florida
attendees started to discuss how they needed better sources of up-to-date information and
resources for dealing with viruses and other similar malware threats (malicious code,
viruses, worms, Trojan Horses, etc.). They wanted to stop re-inventing the wheel and learn
from the efforts of other anti-virus specialists in similar positions at large
organizations. They also wanted a forum where they could talk openly about their issues
with AV companies and products.
During Robert Vibert's presentation on Anti-Virus
deployment, he offered to coordinate the formation of a group of like-minded people to
discuss these topics. Inside AVIEN, we fondly refer to this as our "conception".
During the remainder of the conference, like-minded people pressed their business cards
into his hands. As a result, a few weeks later, the world witnessed the formation (birth)
of a closed, private mailing list which has begun to make a real mark on the world of
malware defense. AVIEN has become a dynamic network of specialists who assist each other
and save their organizations thousands of dollars every year.
Every day, AVIEN members talk with each other about the
latest hot topics in dealing with malware. Common problems are discussed, ideas,
insights and comments shared, to the benefit of all.
Objectives
The objectives of AVIEN are as follows:
- share information about the Anti-Virus reality in each
organization
- share information about the techniques used to combat
viruses and other malware
- share information about AV vendors
- share information about the viruses causing problems
- maintain an early warning system (the
EWS is consistently hours faster than any other entity at alerting members to spreading
threats)
News about the network
Frequently Asked Questions
Network Membership requirements
Membership is restricted to professionals working in
organizations meeting the following criteria:
- they do not work for an organization that sells or markets
Anti-Virus software/hardware
- they manage or are responsible for a user population in
excess of 1500 (if you don't meet this exact requirement, please feel free to submit your
application anyway - we'll take other factors into account if warranted)
- they agree to abide by the group rules as described below
Membership is at an individual level, not corporate.
Membership does not imply endorsement in any shape or form by the organizations employing
AVIEN members.
| "Having instant access
to many years of enterprise level Anti-Virus experience, covering all the major Anti-Virus
software products, via the members of the AVIEN mailing lists, and up to the minute
information on the latest viral threats has proved its value time and again. The AVIEN EWS
and network is proving as essential a tool for fighting viruses in the corporate
environment as having AV on the desktop." Andrew Lee, Virus Alerts Response
Team, Dorset County Council |
Discussion topics
These are some of the topics we've
discussed:
- Characteristics of malicious code as discovered,
particularly those that propagate quickly by exploiting common vulnerabilities.
- Problems/insights on enterprise deployment of the different
AV packages with emphasis on pitfalls and time saving techniques.
- Tweaking the different AV heuristic detection engines to
reduce false-positives without impairing/decreasing AV capabilities.
- Lessons learned - Are you seeing a problem with vendor X and
what did you do about it?
- Virus countermeasures, other than AV scanning software
- Monitoring virus activity within a corporation
- Techniques for fighting major virus outbreaks
- Common problems such as the lack of a virus naming
convention
- Software distribution methods and issues
- Verification methods - How do you check to make sure your
user base is up to date?
- Exchange - What works best on a clustered environment?
- Opinions on the trend towards AV companies providing on-site
services
| " I want you to know
how effective our participation in AVIEN has been. Not only has it provided the
unparalleled benefit of Early Warning when new, fast moving viruses are discovered but it
also provides a forum for the exchange metrics, defense strategies, and software and
signature quality control issues. Virus defense is
not an exact science, but rather it is an art, and it has been made much easier to be
effective with the information exchanged through AVIEN. Many thanks,"
Russ Cluett, MCSE, IT Security & Virus Response Team
Lead, Enterprise Systems Management, OSDC, EDS Canada Inc. |
Member's role
Discuss. This group works because members
participate. Sitting on the sidelines is fine in USENET groups, but this is an active
community and we all gain from the experience and expertise we share. If you are shy, we
don't mind if you sit and watch for a while.
Rules of order
How to join?
- Join the Early Warning System (this
is a prerequisite to joining AVIEN)
- Then, fill out and fax in the AVIEN application
form with complete details about yourself and your organization:
- Number of Anti-Virus users you manage (must be over 1500)
- Your full name, job title, corporate info, contact details -
name, etc.
- Anti-Virus products used on Desktop, Server, and e-mail
- Any other details about your organization you wish to
provide
If you meet the requirements, you'll get a reply with the
details on how to get involved. If in doubt, contact the moderator.
Uncertain about joining?
Send a note to Robert Vibert, the moderator, and he'll put you in touch with existing members
who can vouch for the value AVIEN provides.
Who already belongs?
Current members include professionals who work at companies
like 3M, BASF, Delta, EDS, Ford, Nortel Networks, Prudential, Public Works Canada, Telus,
Tyco, and Wells Fargo, to name just a few. AVIEN members come from any different sectors,
including industry, finance, consultants, education, etc.
These organizations do not sponsor, endorse, or have any
corporate involvement with the network, which can be likened to a private club. Members do
not speak for these organizations, nor represent them in any manner while in the group
discussions.
The number of users represented exceeded 2 million as of
March 15, 2001.
Home
News about the network
|