Path: utzoo!attcan!uunet!tut.cis.ohio-state.edu!ucbvax!decwrl!polyslo!vlsi3b15!vax1.cc.lehigh.edu!sei.cmu.edu!krvw From: G.Moretti@massey.ac.nz Newsgroups: comp.virus Subject: Re: Virus signatures & IBM virus scanner (PC) Message-ID: <0004.9003051143.AA06715@ge.sei.cmu.edu> Date: 26 Feb 90 21:02:03 GMT Sender: Virus Discussion List Lines: 14 Approved: krvw@sei.cmu.edu > Re danger of publishing signature strings. How about publishing the signatures that have processed by a one way algorithm such as Xerox's SNEFRU? Knowing the processed signature would let you detect the original sequence without knowing exactly which bytes were used to form the original sequence. Possible? - ---------------------------------------------------------------------------- | GIOVANNI MORETTI, Consultant | EMail: G.Moretti@massey.ac.nz | |Computer Centre, Massey University | Ph 64 63 69099 x8398, FAX 64 63 505607 | | Palmerston North, New Zealand | QUITTERS NEVER WIN, WINNERS NEVER QUIT | - ----------------------------------------------------------------------------