Virus Bulletin

Virus Bulletin is a specialized periodical and event organizer focusing on computer security, malware analysis, and anti-malware technology. Founded in the late 1980s, it positioned itself at the intersection of practitioner-driven analysis, academic research, and commercial product evaluation, drawing contributors from institutions such as University of Oxford, ESET, Kaspersky Lab, Symantec, and McAfee. The publication has been associated with industry benchmarking, conference programs, and awards that link technical communities across Europe, United States, and Asia.

History

Virus Bulletin was established amid a rising awareness of computer worms and viruses following incidents like the Morris worm, and in the same era that produced organizations such as CERT Coordination Center and vendors like McAfee. Early editors and contributors had backgrounds at places including University College London, Royal Holloway, University of London, GCHQ, and private labs like Sophos and F-Secure. The magazine chronicled milestone malware events—coverage ranged from analyses comparable to reporting on ILOVEYOU and Melissa to commentary on state-linked operations such as those reported in relation to Stuxnet and Equation Group. Over time its scope broadened to include device security debates involving corporations like Microsoft, Apple Inc., and Google, and policy discussions referencing bodies such as ENISA and European Commission.

Publications and Content

The periodical publishes technical articles, vendor product evaluations, and retrospective analyses by authors affiliated with Imperial College London, Royal Holloway, SRI International, and independent labs like AV-TEST and AV-Comparatives. Regular sections have featured signature topics: hands-on reverse engineering case studies referencing tools from IDA Pro authors and techniques used by researchers at Kaspersky Lab; comparative tests similar in approach to methodologies used by NIST; and threat intelligence syntheses echoing reporting styles from FireEye and CrowdStrike. Contributions often cite datasets and standards from institutions such as Common Vulnerabilities and Exposures and MITRE. The magazine has published special issues and white papers that cross-reference work from conferences like Black Hat USA, DEF CON, RSA Conference, and IEEE Symposium on Security and Privacy.

Conferences and Awards

Virus Bulletin organizes an annual conference that aggregates speakers from laboratories including Carnegie Mellon University's CERT/CC, research groups at Cambridge University, and practitioners from vendors like Trend Micro and Bitdefender. Presentations often align with workshops seen at Usenix, ACM SIGCOMM, and ACM Conference on Computer and Communications Security. The organization is also known for its "VB100" award, a comparative recognition similar in function to accolades given by AV-TEST and AV-Comparatives, and frequently cited alongside evaluations from SE Labs and Mornoe. Keynote speakers have included figures from Google Project Zero, investigators associated with Europol, and academics linked to Stanford University and Massachusetts Institute of Technology. The conference program typically features panels on topics previously highlighted at World Economic Forum security sessions and incorporates demonstrations comparable to those at Chaos Communication Congress.

Research and Impact

Articles and conference proceedings have influenced both operational practices at vendors such as Sophos, Palo Alto Networks, and CrowdStrike and academic research at centers like ETH Zurich and Max Planck Institute for Software Systems. The magazine's malware test methodologies have been referenced in studies produced by US-CERT and in technical advisories issued by Cisco Talos and Microsoft Security Response Center. Peer communities at University of California, Berkeley and Princeton University have used analyses published in the periodical when teaching courses on reverse engineering and secure coding. The publication has also amplified discourse around supply chain attacks, citing cases involving companies like SolarWinds and topics discussed at OECD and NATO cyber dialogues.

Organization and Funding

Virus Bulletin operates as a private enterprise staffed by editors and technical reviewers drawn from organizations such as Malwarebytes, ESET Research, and academic units at University of Birmingham. Financial support historically derives from conference fees, subscriptions, and sponsorships provided by commercial entities including Microsoft, Google, IBM Security, and smaller vendors from the Antivirus Industry. The entity maintains editorial collaborations with professional associations like ISACA and (ISC)² for continuing education content, and has partnered with laboratory test houses akin to AV-Comparatives for independent benchmarking exercises. Governance has involved trustees and advisory board members with appointments from research institutes including Royal Holloway and consultancy firms such as Deloitte.

Category:Computer security publications Category:Magazines established in 1989