Virus detection using artificial immune system with genetic algorithm

العناوين الأخرى

الكشف عن الفيروسات باستخدام نظام المناعة الاصطناعي و الخوارزمية الجينية

مقدم أطروحة جامعية

Affanah, Suha M. A.

مشرف أطروحة جامعية

al-Hamami, Ala H.
Abu Zitar, Raid

أعضاء اللجنة

Ubayd, Nadim
al-Ani, Muzhir Shaban
Kasasibah, Basil

الجامعة

جامعة عمان العربية

الكلية

كلية العلوم الحاسوبية و المعلوماتية

القسم الأكاديمي

قسم علم الحاسوب

دولة الجامعة

الأردن

الدرجة العلمية

دكتوراه

تاريخ الدرجة العلمية

2010

الملخص الإنجليزي

The protection against viruses is becoming increasingly difficult day by day, and they form risks on every one who uses computers, especially large companies and institutions.

The viruses' intelligence is accumulated with time, and their signatures are changing continuously, which has made the Anti-viruses mission more complicated.

Consequently, the issue of detecting viruses has been considered a hot and important topic.

This dissertation aims to develop an algorithm, which is based on the concepts of the Artificial Immune System to detect viruses.

Several studies have been concerned with the Artificial Immune System, which is inspired by the natural immune system of humans and animals.

This subject is relatively considered recent, and is not matured yet.

This system has been applied in different fields, most importantly viruses.

An algorithm has been suggested in this dissertation, which is based on the Artificial Immune System.

A clonal selection Algorithm has been developed to detect viruses, which has been written, programmed and called the Virus detection Clonal (VDC) algorithm.

The VDC algorithm consists of three basic steps: cloning, Hypermutation and re-selection stochastically.

Within the step of the reselection stochastically; there lay the virus’s detection process, where the viruses’ signatures are matched with the files.

The developed VDC algorithm is subjected to testing of two phases; training and matching.

Two main parameters are determined; one of them is setting the number of signatures per clone (Fat), while the other defines the Hypermutation probability (Pm).

Later on the researcher used Genetic Algorithm as a tool, to improve the developed algorithm in searching the values of the main parameters (Fat and Pm) to reproduce better results.

The dissertation results have shown that the detection rate of viruses, by using the developed algorithm, is 94.4%.

As for the detection rate of false positives, it has reached 0%.

These rates are confirmed by the Genetic Algorithm.

The Dissertation has concluded that the developed algorithm (VDC), which is created to detect viruses, is good, and can be used in this field.

The researcher has recommended that the developed algorithm can be utilized to be applied on other types of Malware that have signatures

التخصصات الرئيسية

الرياضيات

الموضوعات

• الخوارزميات
• برمجيات الحاسوب
• فيروسات الحاسوب

عدد الصفحات

166

قائمة المحتويات

• APA
• MLA
• AMA

لغة النص

الإنجليزية

نوع البيانات

رسائل جامعية

رقم السجل

BIM-528614