Here at ClamAV, we continue to welcome signature submissions to improve community detection. As a thanks to our community, we like to reward individuals with some cool “ClamAV swag” items such as our ClamAV t-shirts, battery chargers, Snort calendars, and other goodies for signature submissions accepted.
Standard rules for submission criteria:
We are accepting signatures into ClamAV via the Community-Sigs mailing list, which anyone may join here: http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs
When we receive a signature, we will follow our standard internal procedures (which involves heavy QA of the signature, testing, optimization for performance, and running it against our bank of clean files).
You may reference the ClamAV Signatures Manual for general signature questions, as well as discussing it among fellow ClamAV Signature writers on the above list.
The signatures are released in the Official ClamAV Signature Set and are available to the ClamAV community via our normal mirror rule distribution process, published approximately every four hours!
We will provide you feedback about how to improve your signatures such as what you should or should not do, tips and tricks involved with the latest versions of ClamAV, as well as giving the author full attribution for their submissions.
If you’d like to submit to the ClamAV signature set, please email the above list with your signatures and research behind it (pcap, ascii dump, references, anything!)
As always False positive reports belong here: http://www.clamav.net/reports/fp
The highest submitter for accepted signatures for each month will receive some goodies. Keep in mind that we must accept the signatures.
We thank the community in advance for community submissions, as well as continued submission of false positive reports.
