Why should you care about Malware Attribute Enumeration and Characterization (MAEC)?
Posted by AngelaWong, 09-04-2020
Why should you care about MAEC?
The absence of any widely accepted standard for characterizing malware means that there
is no precise technique for communicating the particular malware attributes, nor for
enumerating its fundamental makeup. MAEC framework solves these problems, as the
characterization of malware using abstract patterns offers a wide range of benefits
over the use of physical signatures. It allows accurate encoding of how the malware operates
and the particular actions that it performs. Such information can be used for malware
detection, but also for assessing the malware’s end-goal. Overall, it provides a set of
modern tools and techniques for combating and detecting malware.
What is the MAEC Community?
MAEC is a community-developed project, which involves representatives from antivirus,
operating system, and software vendors, security services providers, IT users, and others
from across the international cybersecurity communities.
The members of MAEC can discuss the latest versions of MAEC specifications and other
stuff via MAEC Community Discussion Lists. Members can leverage the Encyclopedia of Malware
Attributes to collaborate on building semantic MediaWiki of malware. Members can also use
MAECProject GitHub Tools & Utilities to make contributions to open-source MAEC development.
More information
Source : https://cyware.com/educational-guides/cyber-threat-intelligence/why-should-you-care-about-malware-attribute-enumeration-and-characterization-maec-836f