Facebook announced a new repository this morning for sharing information about malware threats called ThreatExchange. Using a familiar Facebook look and feel, with APIs for querying and publishing threat data, the system is designed to allow companies to contribute information about common attacks, and thereby make it safer for the group.
Early partners include Pinterest, Tumblr, Twitter and Yahoo. Dropbox and bit.ly have since come on board.
There is a growing feeling among security industry observers that there is safety in the herd, that the sheer number of threats has become too great for any one company to handle on its own.
The genesis for ThreatExchange began about a year ago when Facebook was experiencing a nasty spam-driven malware attack, Mark Hammell, manager of the Facebook threat infrastructure team, told TechCrunch. He decided to contact other companies, which also had a sizable user bases to see if they were experiencing similar attacks.
All of the partners recognized there was a common goal here and finding information on the type of malware, the source domains, the IP addresses involved and the nature of the malware itself, was key to the success of the group in battling these types of attacks.
While the participating companies recognized the need for this type of system, nobody had actually come forward and taken the lead in the past. Facebook had been building a platform in-house for compiling this type of information using the Facebook platform.
They believed that using the Facebook Graph, which helps you see connections among your friends, they could also see connections about the hackers and their methodologies. It made sense to use that existing, commonly understood Facebook core as a basis for what would become ThreatExchange.
Early partners include Pinterest, Tumblr, Twitter and Yahoo. Dropbox and bit.ly have since come on board.
There is a growing feeling among security industry observers that there is safety in the herd, that the sheer number of threats has become too great for any one company to handle on its own.
The genesis for ThreatExchange began about a year ago when Facebook was experiencing a nasty spam-driven malware attack, Mark Hammell, manager of the Facebook threat infrastructure team, told TechCrunch. He decided to contact other companies, which also had a sizable user bases to see if they were experiencing similar attacks.
All of the partners recognized there was a common goal here and finding information on the type of malware, the source domains, the IP addresses involved and the nature of the malware itself, was key to the success of the group in battling these types of attacks.
While the participating companies recognized the need for this type of system, nobody had actually come forward and taken the lead in the past. Facebook had been building a platform in-house for compiling this type of information using the Facebook platform.
They believed that using the Facebook Graph, which helps you see connections among your friends, they could also see connections about the hackers and their methodologies. It made sense to use that existing, commonly understood Facebook core as a basis for what would become ThreatExchange.
0 comments:
Post a Comment