Welcome to our regular roundup of events and activities in and around AMTSO.
Meetings and Events
Our member meetings will take place next week. Day one will feature updates on AMTSO and our testing Standard, our RTTL and ThreatList projects, a panel on software and digital content monetization-related issues, and a presentation from new member Bright Data. Day two has a packed agenda with a keynote from Microsoft’s Raza Syed, a look at generative AI from AMTSO’s regular legal commentator Terry Budd, a member presentation from SecureIQLab followed by discussion of our XDR project, and further guest presentations from MITRE, SecurityZones, and noted security expert and communicator Paul Ducklin, who will be looking at the history of the EICAR test file, used in many of our Security Features Check tools, and lessons it holds for the future. The day will wrap up with discussion of our ongoing efforts to connect more closely with purchasers of security products and how AMTSO and our tester members can help meet their needs. An updated agenda has been posted to our member website, and call-in details for those attending remotely will be circulated shortly. Recordings of most sessions should be available to members shortly after the event.
Following the meetings, AMTSO will be represented at the Virus Bulletin conference, so if you’re attending do drop by our booth and say hello.
RTTL and ThreatList
The RTTL team held their regular call last week, reviewing progress of expanding and improving the system as well as checking in on the ThreatList project, with details of both to be shared with members and guests at our upcoming meetings.
XDR Testing Criteria
We held another call of our XDR group this week, building on ideas for addressing the issue of XDR testing as we work towards a set of criteria for useful tests. Further outreach to potential contributors to a planned repository of configuration guidance has been worked on this week too.
New Frontiers group
A call was also held this week for the New Frontiers Group, looking at plans for outreach to CISOs and other power-users of testing data in the enterprise user community. These latest ideas will be reviewed with members at the London meetings next week.
AMTSO Standard and Test Calendar
Further updates were made to our test calendar over the last weeks, including a large number of new test notifications and commentary calls under our Testing Protocol Standard. Here’s a summary of activities from our Standard compliance team:
- Testing Ground Labs released their August 2023 Consumer Android Malware Detection Test (AMTSO Test ID: AMTSO-LS1-TP084) and Business Android Malware Detection Test (AMTSO Test ID: AMTSO-LS1-TP085) on Tuesday, September 26th, 2023. Phase 2 Commentary Collection is now underway and a Compliance Report will follow.
- Phase 1 Commentary Collection for the AV Lab Cybersecurity Foundation covering their September 2023 Advanced In-the-Wild Malware Test (AMTSO Test ID: AMTSO-LS1-TP086) was launched on Monday, September 25th, 2023.
- Phase 1 Commentary Collections for the MRG-Effitas Q3 2023 360 Degree Android Assessment and Certification (AMTSO Test ID: AMTSO-LS1-TP087) and Q3 2023 360 Degree Assessment and Certification (Endpoint) (AMTSO Test ID: AMTSO-LS1-TP088) closed on Wednesday, September 27th, 2023.
- Following a Public Test Notification on Monday, September 25th, 2023, Phase 1 Commentary Collection for SE Labs for their Q4’2023 Endpoint Protection Test Plan (AMTSO Test ID: AMTSO-LS1-TP090) will close on Thursday, October 5th, 2023.
- AppEsteem’s September 2023 incremental Compliance Check for their UWS Test Series (AMTSO Test ID: AMTSO-LS1-TP090) was completed on Wednesday, September 27th, 2023 and the corresponding Compliance Report has been issued.
- A Public Test Notification was issued for the AVLab Cybersecurity Foundation Q4’2023 Analysis of Online Payment Protection Modules (Banking) in Windows 11 (AMTSO Test ID: AMTSO-LS1-TP089) on Thursday, September 21st, 2023 with Phase 1 Commentary Collection now underway.
Information on all published and upcoming tests being tracked by AMTSO can be found in our test calendar.
ABOUT THIS NEWSLETTER
We send this newsletter to all AMTSO member representatives, as well as non-members who have engaged with AMTSO recently and have an interest in what’s going on in the AMTSO community. If you have any friends or colleagues who would like to be kept informed of developments in the testing world, they can sign up here. If you’d like to know more about joining the AMTSO community, there’s information and an application form here.