Why should you care about Malware Attribute Enumeration and Characterization (MAEC)?

Posted by AngelaWong, 09-04-2020

Why should you care about MAEC?

 

The absence of any widely accepted standard for characterizing malware means that there 

is no precise technique for communicating the particular malware attributes, nor for 

enumerating its fundamental makeup. MAEC framework solves these problems, as the 

characterization of malware using abstract patterns offers a wide range of benefits 

over the use of physical signatures. It allows accurate encoding of how the malware operates

 and the particular actions that it performs. Such information can be used for malware

 detection, but also for assessing the malware’s end-goal. Overall, it provides a set of 

modern tools and techniques for combating and detecting malware.

 

 

 

What is the MAEC Community?

 

MAEC is a community-developed project, which involves representatives from antivirus, 

operating system, and software vendors, security services providers, IT users, and others

 from across the international cybersecurity communities.

 

The members of MAEC can discuss the latest versions of MAEC specifications and other 

stuff via MAEC Community Discussion Lists. Members can leverage the Encyclopedia of Malware

 Attributes to collaborate on building semantic MediaWiki of malware. Members can also use 

MAECProject GitHub Tools & Utilities to make contributions to open-source MAEC development.

 

More information

 

Source : https://cyware.com/educational-guides/cyber-threat-intelligence/why-should-you-care-about-malware-attribute-enumeration-and-characterization-maec-836f