Common Computing Security Standards Forum

{{Infobox non-profit

| name = Common Computing Security Standards Forum

| logo = CCSSF Logo.gif

| type = Professional Organization

| founded_date = 2009

| founder = Melih Abdulhayoğlu

| location = Jersey City, New Jersey, United States

| focus = Providing internet security industry standards and protecting end users

| homepage = {{URL|http://www.ccssforum.org}}

}}

Common Computing Security Standards Forum (CCSS Forum) is a voluntary organization of vendors and providers of security software, operating systems, and web browsers.{{cite web |url=http://www.ccssforum.org/ |title=Eliminating Malware - The Common Computing Security Standards Forum |publisher=Ccssforum.org |date= |accessdate=2012-11-08 |archive-date=2021-01-25 |archive-url=https://web.archive.org/web/20210125014639/https://www.ccssforum.org/ |url-status=dead }}

Goals

The CCSS Forum was formed with the following goals:

  • Mitigating the risk of malicious intent and software,
  • Creating standards for the industry, and
  • Including all security providers in order to maximize the benefit and protection of the end users.

History

In 2009, Melih Abdulhayoğlu organized the Common Computing Security Standards Forum initially for the purpose of maintaining a list of legitimate antivirus engines.

This was in response to "scareware" products that present themselves as antivirus software but are either adware or malware.{{cite web |url=http://news.techworld.com/security/119239/av-vendors-fight-scareware-with-new-whitelist/ |title=AV vendors fight 'scareware' with new whitelist - Techworld.com |publisher=News.techworld.com |date= |accessdate=2012-11-08 |archive-url=https://web.archive.org/web/20121105150531/http://news.techworld.com/security/119239/av-vendors-fight-scareware-with-new-whitelist/ |archive-date=2012-11-05 |url-status=dead }}{{cite web|url=http://www.comodo.com/resources/home/ccss-forum.pdf|title=Computer Fraud & Security|publisher=Comodo.com|accessdate=2012-11-08}}

According to the FBI, they are aware of an estimated loss to victims from rogue antivirus software of as much as $150 million.{{cite web |url=http://www.securitypark.co.uk/security_article264145.html |title=Common Computing Security Standards Forum Fights Rogue Anti-Virus - Security Park news |publisher=Securitypark.co.uk |accessdate=2012-11-08 |archive-url=https://web.archive.org/web/20121027022331/http://www.securitypark.co.uk/security_article264145.html |archive-date=2012-10-27 |url-status=dead }}{{Cite web |url=http://news.techworld.com/security/119239/av-vendors-fight-scareware-with-new-whitelist/ |title=AV vendors fight 'scareware' with new whitelist - Techworld.com |access-date=2012-10-26 |archive-url=https://web.archive.org/web/20121105150531/http://news.techworld.com/security/119239/av-vendors-fight-scareware-with-new-whitelist/ |archive-date=2012-11-05 |url-status=dead }}

Whitelist

The CCSS maintains a so-called "whitelist" of legitimate organizations that provide antivirus systems. The "Trusted Vendors" list can be viewed on the organization's web site, http://www.ccssforum.org {{Webarchive|url=https://web.archive.org/web/20210125014639/https://www.ccssforum.org/ |date=2021-01-25 }}

References