A malware detection system inspired on the human immune system

  • Authors:
  • Isabela Liane de Oliveira;André Ricardo Abed Grégio;Adriano Mauro Cansian

  • Affiliations:
  • São Paulo State University (Unesp), São José do Rio Preto, SP, Brazil;Renato Archer IT Research Center (CTI/MCT), Campinas, SP, Brazil;São Paulo State University (Unesp), São José do Rio Preto, SP, Brazil

  • Venue:
  • ICCSA'12 Proceedings of the 12th international conference on Computational Science and Its Applications - Volume Part IV
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

Malicious programs (malware) can cause severe damage on computer systems and data. The mechanism that the human immune system uses to detect and protect from organisms that threaten the human body is efficient and can be adapted to detect malware attacks. In this paper we propose a system to perform malware distributed collection, analysis and detection, this last inspired by the human immune system. After collecting malware samples from Internet, they are dynamically analyzed so as to provide execution traces at the operating system level and network flows that are used to create a behavioral model and to generate a detection signature. Those signatures serve as input to a malware detector, acting as the antibodies in the antigen detection process. This allows us to understand the malware attack and aids in the infection removal procedures.