The 2nd International CARO Workshop will be held on 1 and 2 May 2008 at the Crowne Plaza Hotel Hoofddorp in The Netherlands.

As with the previous workshop on Iceland last year focusing on the Testing of AntiVirus, this workshop will have a theme as well. This year the focus will be on the technical aspects and problems caused by Packers, Decryptors and Obfuscators in the broadest sense.

We are welcoming presentations and suggestion, including but not limited to the following topics:

• specific versus universal unpacking
  
• dynamic translation
  
• emulation
  
• unpacking by memory dumping
  
• pure packer recognition as a means of detection, problems with products doing that
  
• how to do proper testing of packed, encrypted of obfuscated malware
  
• black/whitelisting packers, a good or a bad idea
  
• how to make unpacking faster
  
• how to handle script obfuscation
  
• tools/utilities (emulators, IDA Plug-Ins, debugger scripting, etc)
  
• anti-unpacker tricks
  
• mutating scripts