Big Numbers: The Current State of Malware Collections and Sample Sharing

This presentation will provide a detailed view at the current numbers of malware samples circulating in malware collections that vendors and other players in computer security field share with each other. The huge percentage of duplication in the collections will be discussed. The relevance of the collections to comparative testing and to real life "in the wild" encounters will be detailed. There will be examples of samples that make the most rounds in the sample sharing - both malicious and clean. A discussion of whether we as industry should consider large scale clean samples or metadata sharing will be offered.