ABOUT THE ICSG MALWARE METADATA EXCHANGE FORMAT WORKING GROUP
The Malware Metadata Exchange Format (MMDEF) Working Group is working on expanding the breadth of information able to be captured and shared about malware in a standardized fashion. The initial phases of this effort are focused on adding new capabilities to the MMDEF schema, which is currently in use by AV vendors for the purpose of augmenting shared malware samples with additional metadata.
These capabilities include the following:
The latter phase of this effort will be focused on conducting a feasibility study on the creation of a standardized system for white-box malware behavioral metadata profiling. Such a system would provide for a standard way of representing and exchanging information on malware behavior derived from instruction execution.
To participate in the Malware Metadata Exchange Format Working Group, the entity with which you are associated (company, organization, etc.) must become a member of ICSG.
Only entity members of the ICSG can have voting rights in the Working Group. Additionally, some individual subject experts may be invited to participate in the Working Group (without voting rights).