Mobile AntiVirus Research Association

Virus Sample Sharing Agreement

The following agreement is made between the Mobile AntiVirus Research Association (MARA) and the undersigned party. These parties desire to share the following disclosed information for the purpose of antivirus software research, development and testing purpose:

• Malware including viruses, worms and Trojans
• A software/application which is classified as riskware or a some kind of threat to a common Mobile users.

Each party agrees on following terms

• Will submit all requested samples and its variants via email within 24 hours of request by other party. Provided he/she has the sample and has not received the sample from other party and is not bound in any kind of non-disclosure agreement with that party. In other words he/she will have to share the sample and its variants provided he has received/discovered the sample from the source which does not limit its sharing for research purposes.
• Samples reasonably known to be in the wild are considered an emergent threat and for reasons of public safety will be shared, regardless of any previously existing non-disclosure agreements.
• Sample should be submitted in PGP encrypted form by using the public key of the requesting party, or other mutually agreed protection mechanism
• Shared sample will only be used for research purpose and care will be taken to make sure that it does not spread out of the research lab.
• All disclosed information is expressly agreed to be NOT CONFIDENTIAL, with no fees or restrictions on the disclosed information.
• Each party agrees and follows the MARA code of conduct which is also included below and its updated more recent version will always be on the MARA website.
• This agreement may be terminated by either party with 60 days notice.

MARA Code of Conduct

The parties agree to the following:

• To act honestly, fairly and considerately towards other MARA members.
• Not to create or distribute (this includes exchanging) malware of any type unless it is for research and analysis purposes.
• Not to provide information to third parties about other members. All correspondence between members is strictly confidential.
• To act at all times in a manner that will not discredit the MARA organization
• Not participate in computer crimes including but not limited to hacking and denial of service attacks
• That the MARA board reserves the right to suspend or remove members that it deems do not meet the requirements as set out in this Code of Conduct.