Signaure-based Antivirus is dead, we want to show you just how dead it is. This presentation will detail our findings from running the Race-2-Zero contest during DC16. The contest involves teams or individuals being given a sample set of malicious programs to modify and upload through the contest portal. The portal passes the modified samples through a number of antivirus engines and determines if the sample is a known threat. The first to pass their sample past all antivirus engines undetected wins that round. Each round increases in complexity as the contest progresses.

Topics covered will include:

• An overview of the multi-AV engine interface

• Mutation / obfuscation techniques

• Statistical analysis of the time taken to circumvent various products

• Different approaches used by contestants

• Were viruses or exploits easier to obfuscate?

Prize giving ceremony with celeb judging panel... prizes will be awarded for

• The most elegant solution

• Comedy value

• Dirtiest hack

• ... and most deserving of a beer

Simon Howard With a penchant for black t-shirts, jeans and the lyrical styling of Pantera, Simon has been touching computers ever since he can remember.