Ross Anderson awarded BCS Lovelace Medal

Cambridge professor to deliver VB2015 keynote.

Yesterday, the British Computer Society (BCS) announced that the 2015 Lovelace Medal has been awarded to Prof. Ross Anderson.

Named after and in honour of Ada Lovelace (1815-1852), who is often credited as being the first computer programmer, the Lovelace Medal is awarded to "individuals who have made an outstanding contribution to the understanding or advancement of computing". Previous winners include Linux creator Linus Torvalds and World Wide Web inventor Tim Berners-Lee.


Does it matter if my banking password is 'Prague'?

Users do choose weak passwords, but they aren't as big a problem as we think.

This week, I spent a few days at the Cyber Security Summit Financial Services conference in Prague, discussing the state of security with people who work in the financial sector.

Unsurprisingly, a common topic of discussion was that group of individuals who cause headaches for all security engineers: users. They show a surprising inventiveness when it comes to doing things wrong and are often willing to go so far as to take a photograph of their list of TAN codes to help crooks circumvent two-factor authentication. On top of that, they have a tendency to choose very weak passwords.


Throwback Thursday: The Unbearable Lightness of Testing

VB gets in on the Throwback Thursday act, delving into the archives.

Over the last couple of years, the 'Throwback Thursday' trend has taken the Internet by storm, with social media users indulging in a weekly wallow in nostalgia, fondly resurrecting photographs of themselves wearing terrible fashion in their childhood or sporting awful haircuts in their teens. The VB team decided it was high time we got in on the act, but to spare you the photographs (for now at least), we plan to use the opportunity to take a regular delve into our archives.

This week, we turn back the clock to December 1996 at a time when the memory limits of the DOS environment posed issues for anti-malware developers that we wouldn't give a second thought to today. While scanners were already "groaning" under the load of the ever-increasing number of viruses (the growth in the number of known viruses was then around 150-200 per month), the need to add complex new scan capabilities - for dealing with macro viruses - threatened to be the last straw for some. The solution for several products of the time was to supply a second executable offering macro-scanning functionality. The then Editor of VB, Ian Whalley, quite rightly argued that it was unreasonable to expect people to have to run multiple programs to detect different types of virus and wondered where we would be if we had to have a product consisting of 9,500 separate executables, "one for every virus...".


VB2014 paper: Swipe away, we're watching you

Hong Kei Chan and Liang Huang describe the various aspects and the evolution of point-of-sale malware.

Since the close of the VB2014 conference in Seattle in October, we have been sharing VB2014 conference papers as well as video recordings of the presentations. Today, we have added 'Swipe away, we're watching you' by Fortinet researchers Hong Kei Chan and Liang Huang.

Point-of-Sale (PoS) malware was a little known threat until late 2013. Since then, a large number of US chain stores have suffered data breaches via their payment terminals.


VB Conference

VB2015 Prague, 30 Sept - 2 Oct 2015: Covering the global threat landscape The VB conference is a major highlight of the security calendar, with many of its regular attendees citing it as the IT security event of the year. The 25th Virus Bulletin International Conference (VB2015) takes place 30 September to 2 October 2015 at the Clarion Congress Hotel, Prague, Czech Republic.

Previous VB conference delegates said:

‘VB is the best technical conference I have ever attended.’


All but three of the 16 full solutions submitted for this month's test achieved a VBSpam award, and six of them achieved a VBSpam+ award. | Read more...


The latest VB100 comparative on the evergreen Windows 7 resulted in a pleasingly high success rate with just a few products failing to make the grade for certification. | Read more...

Date Event Location
Apr 20 - 24 RSA Conference 2015 San Francisco, CA, USA
Apr 22 - 24 Commonwealth Cybersecurity Forum 2015 London, UK
Apr 21 - 24 Cyber Intelligence Asia 2015 Manila, Philippines
Apr 28 44CON Cyber Security London, UK
May 10 - 14 Third International ICS Cyber Security Forum Abu Dhabi, UAE
May 11 - 12 9th International CARO Workshop Hamburg, Germany
May 11 - 12 Global Forum on Cyber Security for Financial Sector Frankfurt, Germany
May 12 - 13 2nd Annual Kingdom Cyber Security Forum Riyadh, Saudi Arabia
Sept 30 - Oct 2 VB2015 Prague, Czech Republic
Oct 05 - 07 VB2016 Denver, CO, USA


virusbtn:New blog: Ross Anderson awarded BCS Lovelace Medal; Cambridge professor to deliver VB2015 keynote
Fri Apr 17 09:08:29

virusbtn:New blog: Does it matter if my banking password is 'Prague'?
Thu Apr 16 13:46:57

virusbtn:New blog: Throwback Thursday: The Unbearable Lightness of Testing
Thu Apr 16 13:20:11

virusbtn:Point-of-sale malware isn't just a problem in the US, as FighterPOS, which targets Brazil, shows
Tue Apr 14 20:29:48

Jobs Recruit Sidebar