<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Maksym Schipka's Playground &#187; Malware</title>
	<atom:link href="http://schipka.com/archives/category/malware/feed" rel="self" type="application/rss+xml" />
	<link>http://schipka.com</link>
	<description>Thinking out loud</description>
	<lastBuildDate>Fri, 20 Mar 2009 13:12:02 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>Skeptic Catch and Virus Statistics</title>
		<link>http://schipka.com/archives/31</link>
		<comments>http://schipka.com/archives/31#comments</comments>
		<pubDate>Sun, 18 May 2008 10:33:11 +0000</pubDate>
		<dc:creator>maksym</dc:creator>
				<category><![CDATA[Malware]]></category>
		<category><![CDATA[messagelabs]]></category>
		<category><![CDATA[skeptic]]></category>
		<category><![CDATA[statistics]]></category>
		<category><![CDATA[virus]]></category>
		<category><![CDATA[worm]]></category>

		<guid isPermaLink="false">http://schipka.com/?p=31</guid>
		<description><![CDATA[It might be time to explain what Skeptic Catch and Virus Stats links on this website are all about. As many of you would know, and as my Resume says, I work for MessageLabs. A large part of my responsibilities includes looking afte Anti-Virus (Anti-Malware, to be more precise) and, to some extent, Anti-Spam services. A part of [...]]]></description>
			<content:encoded><![CDATA[<p>It might be time to explain what <a href="http://schipka.com/skeptic-catch" target="_blank">Skeptic Catch</a> and <a href="http://schipka.com/virusstats" target="_blank">Virus Stats</a> links on this website are all about.</p>
<p>As many of you would know, and as my <a href="http://schipka.com/resume" target="_blank">Resume</a> says, I work for <a href="http://www.messagelabs.com" target="_blank">MessageLabs</a>. A large part of my responsibilities includes looking afte Anti-Virus (Anti-Malware, to be more precise) and, to some extent, Anti-Spam services. A part of that, in turn, includes articulating the value of <a href="http://www.messagelabs.com" target="_blank">MessageLabs</a> service and coming up with some eye-catchers.</p>
<p>Sometimes, it just happens that creating some <a href="http://en.wikipedia.org/wiki/Proof_of_Concept" target="_blank">Proof Of Concepts</a> is easier on my own home box. This is what <a href="http://schipka.com/skeptic-catch" target="_blank">Skeptic Catch</a> and <a href="http://schipka.com/virusstats" target="_blank">Virus Stats</a> are.</p>
<ul>
<li><a href="http://schipka.com/skeptic-catch" target="_blank">Skeptic Catch</a> shows in percentages how much malware, phishing and links (and different combinations thereafter) <a href="http://www.messagelabs.com" target="_blank">MessageLabs</a> services stop using different subcomponents. It shows where our own heuristics scanner <a href="http://www.messagelabs.co.uk/technology/skeptic" target="_blank">Skeptic</a> adds value and how much it actually stops in addition to other more traditional vendor scanners</li>
<li><a href="http://schipka.com/virusstats" target="_blank">Virus Stats</a> is my attempt to toy with <a href="http://en.wikipedia.org/wiki/AJAX" target="_blank">Ajax</a>. It uses <a href="http://maps.google.com/" target="_blank">Google Maps</a> to show where different malware and simply suspicious items are coming from. In essence, in the current threat landscape, it is a map of bots scattered around the world. Of course, the locations of those are only as good as the IP-to-GeoLocation database is. My <a href="http://www.maxmind.com/" target="_blank">GeoIP</a> database is somewhat outdated, but it is good enough for a Proof Of Concept</li>
</ul>
<p>So there you go &#8211; enjoy!</p>
]]></content:encoded>
			<wfw:commentRss>http://schipka.com/archives/31/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
