Anti-Virus Information Exchange Network

Background

At the Virus Bulletin 2000 Conference in Orlando, Florida attendees started to discuss how they needed better sources of up-to-date information and resources for dealing with viruses and other similar malware threats (malicious code, viruses, worms, Trojan Horses, etc.). They wanted to stop re-inventing the wheel and learn from the efforts of other anti-virus specialists in similar positions at large organizations. They also wanted a forum where they could talk openly about their issues with AV companies and products.

During Robert Vibert's presentation on Anti-Virus deployment, he offered to coordinate the formation of a group of like-minded people to discuss these topics. Inside AVIEN, we fondly refer to this as our "conception". During the remainder of the conference, like-minded people pressed their business cards into his hands. As a result, a few weeks later, the world witnessed the formation (birth) of a closed, private mailing list which has begun to make a real mark on the world of malware defense. AVIEN has become a dynamic network of specialists who assist each other and save their organizations thousands of dollars every year.

Every day, AVIEN members talk with each other about the latest hot topics in dealing with malware. Common problems are discussed, ideas,   insights and comments shared, to the benefit of all.

Objectives

The objectives of AVIEN are as follows:

  • share information about the Anti-Virus reality in each organization
  • share information about the techniques used to combat viruses and other malware
  • share information about AV vendors
  • share information about the viruses causing problems
  • maintain an early warning system (the EWS is consistently hours faster than any other entity at alerting members to spreading threats)

News about the network  

Frequently Asked Questions

Network Membership requirements

Membership is restricted to professionals working in organizations meeting the following criteria:

  • they do not work for an organization that sells or markets Anti-Virus software/hardware
  • they manage or are responsible for a user population in excess of 1500 (if you don't meet this exact requirement, please feel free to submit your application anyway - we'll take other factors into account if warranted)
  • they agree to abide by the group rules as described below

Membership is at an individual level, not corporate. Membership does not imply endorsement in any shape or form by the organizations employing AVIEN members.

"Having instant access to many years of enterprise level Anti-Virus experience, covering all the major Anti-Virus software products, via the members of the AVIEN mailing lists, and up to the minute information on the latest viral threats has proved its value time and again. The AVIEN EWS and network is proving as essential a tool for fighting viruses in the corporate environment as having AV on the desktop."  Andrew Lee, Virus Alerts Response Team, Dorset County Council

 Discussion topics

These are some of the topics we've discussed:

  • Characteristics of malicious code as discovered, particularly those that propagate quickly by exploiting common vulnerabilities.
  • Problems/insights on enterprise deployment of the different AV packages with emphasis on pitfalls and time saving techniques.
  • Tweaking the different AV heuristic detection engines to reduce false-positives without impairing/decreasing AV capabilities.
  • Lessons learned - Are you seeing a problem with vendor X and what did you do about it?
  • Virus countermeasures, other than AV scanning software
  • Monitoring virus activity within a corporation
  • Techniques for fighting major virus outbreaks
  • Common problems such as the lack of a virus naming convention
  • Software distribution methods and issues
  • Verification methods - How do you check to make sure your user base is up to date?
  • Exchange - What works best on a clustered environment?
  • Opinions on the trend towards AV companies providing on-site services
" I want you to know how effective our participation in AVIEN has been. Not only has it provided the unparalleled benefit of Early Warning when new, fast moving viruses are discovered but it also provides a forum for the exchange metrics, defense strategies, and software and signature quality control issues.

Virus defense is not an exact science, but rather it is an art, and it has been made much easier to be effective with the information exchanged through AVIEN. Many thanks,"

Russ Cluett, MCSE, IT Security & Virus Response Team Lead, Enterprise Systems Management, OSDC, EDS Canada Inc.

 

Member's  role

Discuss.  This group works because members participate. Sitting on the sidelines is fine in USENET groups, but this is an active community and we all gain from the experience and expertise we share. If you are shy, we don't mind if you sit and watch for a while.

Rules of order


How to join?

  1. Join the Early Warning System (this is a prerequisite to joining AVIEN)
  2. Then, fill out and fax in the AVIEN application form with complete details about yourself and your organization:
  • Number of Anti-Virus users you manage (must be over 1500)
  • Your full name, job title, corporate info, contact details - name, etc.
  • Anti-Virus products used on Desktop, Server, and e-mail
  • Any other details about your organization you wish to provide

If you meet the requirements, you'll get a reply with the details on how to get involved. If in doubt, contact the moderator.

Uncertain about joining?

Send a note to Robert Vibert, the moderator, and he'll put you in touch with existing members who can vouch for the value AVIEN provides.

Who already belongs?

Current members include professionals who work at companies like 3M, BASF, Delta, EDS, Ford, Nortel Networks, Prudential, Public Works Canada, Telus, Tyco, and Wells Fargo, to name just a few. AVIEN members come from any different sectors, including industry, finance, consultants, education, etc.

These organizations do not sponsor, endorse, or have any corporate involvement with the network, which can be likened to a private club. Members do not speak for these organizations, nor represent them in any manner while in the group discussions.

The number of users represented exceeded 2 million as of March 15, 2001.

Home      News about the network