Re: Name that worm--plan looks to cut through chaos
From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: Sun, 25 Sep 2005 12:57:54 GMT
From: "Imhotep" <Imhotep@nospam.net>
| "Zotob.E, Tpbot-A, Rbot.CBQ and IRCbot.worm: all names given to a single
| worm that wreaked havoc in Windows 2000 systems last month. Among the
| plethora of identifiers, perhaps the most useful--CME-540--didn't make an
| "But that's about to change. CME-540 was the tag attached to the worm by the
| Common Malware Enumeration initiative, which is just emerging from its test
| phase. Next month, the U.S. Computer Emergency Readiness Team plans to
| officially take the wraps off the effort, meant to reduce the confusion
| caused by the different names security companies give worms, viruses and
| other pests."
It is interesting to note, I could find no data at the US CERT web site on "Common Malware
Enumeration" except pointing to MITRE -- http://www.cve.mitre.org/cme/
MITRE shows CME has been around since at least June 8, 2005.