ICSG is a group of computer security entities that have come together to work on common goals and industry issues. The key focus is to solve security issues.
In the past few years, attackers have shifted away from mass distribution of a small number of threats to micro distribution of millions of distinct threats. ICSG was established, under the umbrella of the IEEE-SA Industry Connections program out of the desire by many in the security industry to pool their experience and resources in response to the systematic and rapid rise in new malware being introduced to the market. Read the ICSG Industry Connections Activity Initiation Document for more information.
It was recognized that the bad actors have been able to leverage the underground economy to gain economies of scale as well as access to specialist tools and services, whereas the security industry was generally responding to threats as individual entities. While there has been some ad-hoc co-operation in the industry in areas such as malware and phish URL sharing, this co-operation has not been standardized or documented in a format that lends itself to systematic improvement in operational efficiency or visibility and review by people outside the vertical industries.
ICSG currently has one Working Group looking at Malware, but expects to add other Working Groups over time.
Join ICSG
ICSG is an entity based group and you may join as a company or organization. It is not individual based. However, some individual subject experts may be invited to participate in the Working Groups. As of 1 January 2010 you will be required to be an advanced entity member of IEEE-SA to be eligible for ICSG membership.
ICSG Members
The initial members in ICSG are the following: