Program

CARO Workshop 2010 Program

May 26
08.00 - 09.00  Registration 
09.00 - 09.15  Welcome to CARO 2010 
Mikko Hyppönen, CRO, F-Secure
 
09.15 - 10.00  Keynote address 
Dr. Alan Solomon
 
10.00 - 10.45  Useful and useless statistics about viruses and anti-virus programs 
Maik Morgenstern and Hendrik Pilz, AV-Test.org
 
10.45 - 11.00  Coffee Break 
11.00 - 11.45  The Current State of Malware Collections and Sample Sharing 
Dmitry O. Gryaznov, McAfee Labs
 
11.45 - 12.30  Sample Sharing Initiative 
Righard Zwienenberg and Trygve Brox, Norman
 
12.30 - 13.45  Lunch Break 
13.45 - 14.30  Virtual Machine Protection Technology and AV Industry 
Zhenxiang Jim Wang, Microsoft
 
14.30 - 15.15  File analysis and unpacking in the age of 40M new samples per year 
Mario Vuksan and Tomislav Pericin, ReversingLabs
 
15.15 - 15.30  Coffee Break 
15.30 - 16.15  Indexing Large Volumes of Binary Content for Fast Search 
Tim Ebringer and 
Marius Gheorghescu, Microsoft
 
16.15 - 17.00  Back to the future detecting the least polymorphic part 
Roel Schouwenberg, Kaspersky Lab
 
17.00 - 17.45  Sequences and Beyond 
Gabor Szappanos, Virusbuster
 
20.00  CARO 2010 Dinner 

May 27


08.30 - 09.15  Registration 
09.15 - 10.00
Anatomy of a Targeted Attack with Global consequences
Cristian Craioveanu, Microsoft
10.00 - 10.45 The Danish Patcher case 
Peter Kruse and Dennis Rand, CSIS
 
10.45 - 11.00  Coffee Break 
11.00 - 11.45  It's Signed, therefore it's Clean, right? 
Jarno Niemelä F-Secure
 
11.45 - 12.30  Detecting malicious web pages with MonkeyWrench 
Armin Büscher, G Data
 
12.30 - 13.45  Lunch Break 
13.45 - 14.30  Using Value Set Analysis for Classification of metamorphic Malware Samples 
Felix Leder, Bastian Steinbock and Peter Martini, University of Bonn
 
14.30 - 15.15  A Brief History of Time
Igor Muttik, McAfee
 
15.15 - 15.30  Coffee Break 
15.30 - 16.15  (Slides) Kernel-22: A Framework for Creating Analysis Tools 
Mike McCarl, ICSALabs
 
(White Paper)
16.15 - 17.00  SWF Disassembler Plug-in for IDA Pro 
Marian Radu, Microsoft
 
17.00 - 17.15  Closing remarks 
Mikko Hypponen, F-Secure