Firms look for spyware standard

Industry big-guns collude on standard definition

A number of major security firms have joined forces to develop an industry standard to define spyware, and to create a methodology to validate anti-spyware products.

The Spywaretesting.com group includes McAfee, Symantec, Trend Micro, ICSA Labs and Thompson Cyber Security Labs. “This initiative has been set up to help customers and analysts to test and validate anti-spyware and ensure that products do what they say,” said McAfee’s Greg Day. A web site managed by ICSA Labs has been set up to monitor the progress of the methodology.

Andy Kellett of analyst Butler Group welcomed the initiative because there is currently a lack of consistency in the way spyware is tackled, but noted the absence of software giant Microsoft. “The obvious big company that’s missing is the usual obvious big company, Microsoft. Especially given that it’s pushing a free version of its [Windows Defender anti-spyware] beta product and making it available to all users,” he added.

However, Microsoft has been talking to the group. In a statement it said, " We are currently in discussion with leaders of the Spywaretesting.com group to explore ways for Microsoft to be involved. Microsoft will continue its industry partnership efforts with the ASC [AntiSpyware Coalition] and TRUSTe. We are encouraged that the industry is coming together to address the spyware issue."

Microsoft added that it was already helping customers to identify spyware through its Windows Defender tools, which are free to download and were released in beta form in January 2005. Microsoft said the package has over 25 million active users.

In separate news, CA has updated its Integrated Threat Management system, which offers protection against spyware and other threats. The latest release integrates new versions of the anti-spyware technology CA gained through its purchase of PestPatrol; and CA Antivirus, which can be managed via a central web-based console. CA’s Simon Perry said that the release marks the first time the firm has integrated PestPatrol with its own technology. The PestPatrol back-end can also now scale up to a much greater number of machines.