Artificial Intelligence In Antivirus Detection System Computer Science Essay

Artificial Intelligence In Antivirus Detection System Computer Science Essay Abstract- Artificial intelligence (AI) techniques have played increasingly important role in antivirus detection. At present, some principal artificial intelligence techniques applied in antivirus detection are proposed, including heuristic technique, data mining, agent technique, artificial immune, and artificial neural network. It believes that it will improve the performance of antivirus detection systems, and promote the production of new artificial intelligence algorithm and the application in antivirus detection to integrate antivirus detection with artificial intelligence. This paper introduces the main artificial intelligence technologies,especially Heuristic which have been applied in antivirus system. Meanwhile, it also points out a fact that combining all kinds of artificial intelligence technologies will become the main development trend in the field of antivirus. Keywords- Anti-virus,Artificial Intelligence,Data mining,Heuristic,Neural network Introduction Artificial Intelligence (AI) is the branch of computer science which deals with intelligence of machines where an intelligent agent is a system that perceives its environment and takes actions which maximize its chances of success.It has numerous applications like robotics,medicine,Finance,Space. One of the most recent one is antivirus softwares. Here we give details regarding heuristic method used in antivirus software. Malware and its types Malware (malicious software) is software designed to infiltrate or damage a computer system without the owners informed consent. Malware types We can distinguish quite few malicious software types. It is important to be aware that nevertheless all of them have similar purpose, each one behave differently. Viruses Worms Wabbits Trojan horses Exploits/Backdoors Spyware Due to different behaviour, each malware group uses alternative ways of being undetected. This forces anti-virus software producers to develop numerous solutions and countermeasures for computer protection. This paper focuses on methods used especially for virus detection, not necessarily effective against other types of malicious software. Infection Strategies To better understand how viruses are detected and recognized, it is essential to divide them by their infection ways. A. Non Resident Viruses The simplest form of viruses which dont stay in memory, but infect founded executable file and search for another to replicate. Resident viruses More complex and efficient type of viruses which stay in memory and hide their presence from other processes. Kind of TSR apps. Fast infectors type which is designed to infect as many files as possible. Slow infectors using stealth and encryption techniques to stay undetected outlast. Methods Used A. Metaheuristic Metaheuristic is a heuristic method for solving a very general class of computational problems by combining user-given black-box procedures in a hopefully efficient way. Metaheuristics are generally applied to problems for which there is no satisfactory problem-specific algorithm or heuristic. B. Heuristic Heuristic is a method to help solve a problem, commonly an informal method. It is particularly used to rapidly come to a solution that is reasonably close to the best possible answer. General Heuristics It is important to remember that metaheuristics are only ideas to solve a problem not a specific way to do that. List below shows main metaheuristics used for virus detection and recognition: Pattern matching Automatic learning Environment emulation Neural networks Data mining Bayes networks Hidden Markov models Concrete Heuristics Specific heuristics practically used in virus detection and recognition, are naturally inherited from metaheuristics. And so, for example concrete method for virus detection using neural networks can be implementation of SOM (Self Organizing Map). Neural Networks (metaheuristic) à ¢Ã¢â‚¬  Ã¢â‚¬â„¢ SOM (heuristic). The most popular, and one of most efficient heuristic used by anti-virus software is technique called Heuristic Scanning. Lacks in Specific Detection Great deal of modern viruses are only slightly changed versions of few conceptions developed years ago. Specific detection methods like signature scanning became very efficient ways of detecting known threats. Finding specific signature in code allows scanner to recognize every virus which signature has been stored in built-in database. BB ?2 B9 10 01 81 37 ?2 81 77 02 ?2 83 C3 04 E2 F2 FireFly virus signature(hexadecimal) Problem occurs when virus source is changed by a programmer or mutation engine. Signature is being malformed due to even minor changes. Virus may behave in an exactly same way but is undetectable due to new, unique signature. BB ?2 B9 10 01 81 37 ?2 81 A1 D3 ?2 01 C3 04 E2 F2 Malformed signature(hexadecimal) Heuristic Scanning We can recognise a virus without examining its structure by its behaviour and characteristics. Heuristic scanning in its basic form is implementation of three metaheuristics: Pattern matching Automatic learning Environment emulation The basic idea of heuristic scanning is to examine assembly language instruction sequences(step-by-step) and qualify them by their potential harmfulness. If there are sequences behaving suspiciously, program can be qualified as a virus. The phenomenon of this method is that it actually detects threats that arent yet known! Fig1. Examination of assembly language sequence A. Recognising Potential Threat In real anti-virus software, heuristic scanning is implemented to recognize threats by following built-in rules, e.g. if program tries to format hard drive its behaviour is highly suspicious but it can be only simple disk utility. Singular suspicion is never a reason to trigger the alarm. But if the same program also tries to stay resident and contains routine tosearch for executables, it is highly probable that its a real virus. AV software very often classifies sequences by their behaviour granting them a flag. Every flag has its weight, if total values for one program exceeds a predefined threshold, scanner regards it as virus. Fig.2. Single-layer classifier with threshold Heuristics Flags Some scanners set a flag for each suspected ability which has been found in the file being analyzed. This makes it easier to explain to the user what has been found. TbScan for instance recognizes many suspected instruction sequences. Every suspected instruction sequence has a flag assigned to it. A. Flag Description: F = Suspicious file access. Might be able to infect a file. R = Relocator. Program code will be relocated in a suspicious way. A = Suspicious Memory Allocation. The program uses a non-standard way to search for, and/or allocate memory. N = Wrong name extension. Extension conflicts with program structure. S = Contains a routine to search for executable (.COM or .EXE) files. # = Found an instruction decryption routine. This is common for viruses but also for some protected software. E = Flexible Entry-point. The code seems to be designed to be linked on any location within an executable file. Common for viruses. L = The program traps the loading of software. Might be a virus that intercepts program load to infect the software. D = Disk write access. The program writes to disk without using DOS. M = Memory resident code. This program is designed to stay in memory. ! = Invalid opcode (non-8088 instructions) or out-of-range branch. T = Incorrect timestamp. Some viruses use this to mark infected files. J = Suspicious jump construct. Entry point via chained or indirect jumps. This is unusual for normal software but common for viruses. ? = Inconsistent exe-header. Might be a virus but can also be a bug. G = Garbage instructions. Contains code that seems to have no purpose other than encryption or avoiding recognition by virus scanners. U = Undocumented interrupt/DOS call. The program might be just tricky but can also be a virus using a non-standard way to detect itself. Z = EXE/COM determination. The program tries to check whether a file is a COM or EXE file. Viruses need to do this to infect a program. O = Found code that can be used to overwrite/move a program in memory. B = Back to entry point. Contains code to re-start the program after modifications at the entry-point are made. Very usual for viruses. K = Unusual stack. The program has a suspicious stack or an odd stack. Avoiding False Positives Just like all other generic detection techniques, heuristic scanners sometimes blame innocent programs for being contaminated by a virus. This is called a false positive or False Alarm. The reason for this is simple. Some programs happen to have several suspected abilities. If a heuristic scanner pops up with a message saying: This program is able to format a disk and it stays resident in memory, and the program is a resident disk format utility, is this really a false alarm? Actually, the scanner is right. A resident format utility obviously contains code to format a disk, and it contains code to stay resident in memory. The heuristic scanner is therefore completely right! You could name it a false suspicion, but not a false positive. The only problem here is that the scanner says that it might be a virus. If you think the scanner tells you it has found a virus, it turns out to be a false alarm. However, if you take this information as is, saying ok, the facts you reported are true for this program, I can verify this so it is not a virus, I wouldnt count it as a false alarm. The scanner just tells the truth. The main problem here is the person who has to make decisions with the information supplied by the scanner. If it is a novice user, it is a problem. Whether we call it a false positive or a false suspicion doesnt matter. We do not like the scanner to yell every time we scan. So we need to avoid this situation. How do we achieve this? Definition of (combinations of) suspicious abilities Recognition of common program codes Recognition of specific programs Assumption that the machine is initially not infected Performance of Heuristics Scanning Heuristics is a relatively new technique and still under development. It is however gaining importance rapidly. This is not surprising as heuristic scanners are able to detect over 90% of the viruses without using any predefined information like signatures or checksum values. The amount of false positives depends on the scanner, but a figure as low as 0.1% can be reached easily. A false positive test however is more difficult to perform so there are no independent results available. Pros and Cons A. Advantages Can detect future viruses. User is less dependent on product updates. B. Disadvantages False positives are possible. Judgment of the result requires some basic knowledge. Conclusions Thus, artificial intelligence technique helps improving the performance of antivirus softwares. This detection-avoiding method makes detection by conventional anti-virus products easier because it means that the programmer can not use very tight and straight code. The virus writer will be forced to write more complex viruses. Thus artificial intelligence increases the threat to virus writers. Acknowledgment I hereby thank Ms.Padmapriya for encouraging and helping us for the submission of this paper

Red Bull Essay

What markets does Red Bull attempt to reach? How do marketing mix elements and target markets combine to form the firm’s marketing strategy? The marketing mix for Red Bull consists of the following: Product: Energy drink Price: $1. 99 (premium) Distribution: Across clubs and similar outlets, mass merchandisers Marketing Communication: Word-of-mouth to television advertising Red Bull attempts to reach extremists, sports enthusiasts, 18 to 24 year olds, women, as well as health conscious consumers, and recently age groups of 30 and above. Marketing mix elements and target markets combine to form Red Bull’s initial marketing strategy which reaches out to extremists, those who are into the adrenaline rushing sports and activities. Since Red Bull is an energy drink, this approach worked well. With the premium price and through word-of-mouth, Red Bull was able to maintain 70 percent of the market. However, as competition began to rise, Red Bull needed to market beyond the extreme market and toward age groups above 24 year olds. Still, competition continues to increase, and now Red Bull is expanding their target market to less extreme sports enthusiasts such as golfers, women, and health conscious consumers. By marketing toward golfers and women, Red Bull shows that anyone can enjoy their product and not just male extremists. Because consumers are becoming more health conscious, Red Bull produced their sugar-free version for those who want to watch their carbohydrates. Overall, as competition continues to increase, Red Bull’s marketing strategy has involved target market expansion as well as some product development and new advertising techniques. . What growth strategies seem to offer the most likely opportunities for the future? The growth strategies that seem to offer the most likely opportunities for Red Bull’s future are their expansion into less extreme sports and the female population. Because Red Bull is an energy drink, most consumers think that its primary purpose is to boost the ener gy of those who are hammering it out on the field, court, or wherever the action may be. However, Red Bull can be used as a simple pick me up when you’re feeling tired or just worn out. This can occur mostly in the work environment. By carrying a can of Red Bull, you can boost your energy level when it seems you’re not going to make it through the shift. Similarly, Red Bull’s initial target was not towards women. Currently, Red Bull is working on expanding their product to women who, just like men, can enjoy the boost Red Bull gives you. With the expansion of their target market, along with new advertising techniques, Red Bull can better promote their product and keep up with the competition instead of falling behind as they have been. 3. What ethical issues are faced by the company? The two predominant ethical issues that are faced by Red Bull are their choice for a target market and the uses for their drink. The specific target market in question is the 18 to 24 year olds. Red Bull has marketed to this particular group because it is comprised largely of college students. Red Bull can be used to give these college students an energy boost when they need to spend all night studying or just to have fun. The problem, however, is that the energy drink is full of caffeine and other ingredients which may prove harmful to those who consume too much at one time. Marketers of Red Bull realize that college students have a need for the extra boost of energy so they have pinpointed them for consumption of their energy drink. Critics believe large amounts of consumption may have harmful effects and this has raised many issues concerning the drink. The other issue is the use of Red Bull in alcoholic drinks. Concerns have risen regarding the mixture of alcohol and Red Bull because of the dangers associated with it. Alcohol by itself already causes numerous problems. If the energy drink full of caffeine is added to alcohol, the harm could become great. This in itself worries critics of Red Bull. Not only does the drink by itself cause concerns, but mixing alcohol with it raises even more issues. 4. As Red Bull expands to other countries, what international marketing issues must be considered? With their international expansion, Red Bull’s marketers must take into account the selection of an entry strategy and deciding on a strategic orientation. Red Bull must choose between three options for an entry strategy: exporting, direct investment, or joint ventures. For strategic orientation, Red Bull has the choice of a standardized marketing strategy or a customized marketing strategy. By choosing a standardized marketing strategy, Red Bull would develop and implement the same product, price, distribution, and promotion in all international markets. On the other hand, with a customized strategy, Red Bull would develop and implement a different targeting mix for each target market country. Like with any expansion situation, Red Bull needs to study the markets within the international countries. Just because their marketing techniques work in the United States, doesn’t mean they’ll work the same internationally. Every country is different. Every market segment is different. For instance, demand and product usage differs from market segment to market segment. Red Bull must also take into account government regulations and laws as they differ from country to country. Not only that, but Red Bull has to realize differences in consumer behavior patterns as well as competition. As Red Bull plans to expand international, there are many aspects they must take into account before doing so. If Red Bull wants to be successful, they must spend a tremendous amount of time researching all the international markets in order to become more aware of each segments needs and desires.

The Cost of Success

The Cost of Success In college, students deal with multiple stress factors and finances should not be included. Numerous of students graduate high school each year and only a select decide to further their education. These students should be able to attend college without worry. College helps students choose a career and prepare for life after their graduation. A student stressing over how they're going to pay for their textbooks or what they're going to eat for dinner because a meal plan wasn't affordable shouldn't even be an issue. College can be an overwhelming experience and even more overwhelming for those who need financial needs met.Being an out-of-state student with no type of grants helps me relate to these situations. Students who are able to focus on school and stress less about finances are more likely to strive in their classes and graduate with a higher grade point average. By having costless tuitions, allotting an amount in a food stipend every month, and giving out-of -state students top priority in campus housing can eliminate stress and build a brighter future for the college students of America. Students should be able to graduate high school with the only concern of being admitted to the school of their choice.Worrying about how tuition will be covered is Just adding to the chaos. Many students graduate high school with the hopes of getting in college but know it is financially impossible for their family. Sure, loans may help but once a student graduates and is ready to start their career, every month they have to pay back what the government loaned them to attend college. For the past two years, I have not received any type of grant for school because my parent's retirement is figured into my financial aid award decision. My parents have worked hard for their retirement and they shouldn't have o use this to pay for my schooling.Tuition should be free for all students who are enrolled full time, maintain a 2. 5 GPA or higher, and have a clea n criminal record. This can really eliminate stress not only from the students, but the parents as well. There are many people in the United States that benefit from the government's Food Stamp program. The program gives a person a roll-over monthly stipend according to their income and household dependent amount. For college students, if you do not have a child, you must be working at least 20 hours a week Just to receive any ood stamps.In some states, college students aren't even eligible for food stamps because the government uses their tuition as income, which results in rejection due to the high amount. Every college student that stays on or off campus, does not have a meal plan, enrolled as a full time student, and maintains a 2. 0 GPA or above, should be allotted at least $250 a month in food stamps. For a student who doesn't receive any financial aid, a meal plan can be very costly. Having to work while being a full time student to provide groceries every month is almost rid iculous. This can resolve umerous money issues as well as stress.Campus housing is another college stressor, especially if a student doesn't have enough money to even cover the residential fees. Many students travel miles and miles each year to attend the school of their choice. Is it fair that these out-of-state students have to compete with in- state students tor housing? Searching tor an apartment trom a ditterent state can extremely challenging, when this can simply be resolved by giving out-of-state students priority in campus housing. Being from North Carolina, I considered on campus housing but I was declined due to over capacity.Because of this I had to search for an apartment through the internet; this was extremely challenging. It is understandable that some college campuses may have limited space for all their students; however, out-of-state students should have priority before spaces are occupied. These solutions may seem abstract but they allow students to stay focused on their academics. Finances are stressful for college students and also adults who have already established a career. It is more important to target the younger community because they hold the key to the world's future.Students who are able to e stress free of basic needs and stay driven to complete school will succeed. They will not only succeed, but be the top of their succeeding class. College altogether is overwhelming, so why add more to a college student's plate? Costless tuition, monthly food stipends, and priority housing for out-of-state students are the solutions that will make a drastic difference in the college environment. Imagine how these solutions can help students succeed in the career they actually want to pursue. This entire world could be made over into a place much more promising for rising adults, like myself

Personal Statement on Medical Research - 881 Words

When I completed the medical school, I was fascinated by the medical research. This fascination led me to select the specialty of immunology. This specialty offered the opportunity of preparing me in medical research without dissociating myself from patient care. In the years as a resident I got important tools such as: the statistical processing of the information collected, and the ability to interpret in an efficient manner the results of research studies. On the other hand, it allowed me increase my knowledge which gave me a greater understanding of the physiopathological mechanisms of many diseases. On having concluded the immunology residence, I began to work on the Institute of Hematology and Immunology, where I could combine the medical research, teaching and patient care for four years. In 2003 occurred two events that definitely marked my preparation as a medical doctor, and my perspective of medicine. During this year, I obtained the visa to live in the United States, and for this reason, I was relocated to the internal medicine service of the Enrique Cabrera National Hospital. At the same time, The Cuban health system was suffering a sudden impact due to the decision of the government of sending massively medical abroad, especially to Venezuela. The hospital where I was working was affected by this situation, the specialists and resident of internal medicine were sent to work outside the country. For this reason the head of the department ofShow MoreRelatedImportance Of Demystifying Medical School Admission757 Words   |  4 PagesStudent National Medical Conference at the City College of New York. This was my first medical conference so I did not know what to expect going in. Upon arrival, I was amazed at the sight of doctors, medical students, res earch presenters, pre-med students, and even high school students gathered together to gain and share knowledge and make connections. The conference consisted of a host of enriching events, of which I attended six: â€Å"Unique Journeys to Medicine†, â€Å"Demystifying Medical School Admission†Read MoreThe Impact Of Service Learning On Residency Interviews1547 Words   |  7 Pagesresidency personal statements. The aim of the study is to investigate how a narrative focused on the benefits of service learning in residency personal statements influence the resident selection process. METHODS Senior medical students completed a voluntary, confidential on-line survey to measure perceived influence of service learning on residency interviews. Student also uploaded their residency personal statements as part of the survey. Content analysis was conducted on the personal statements toRead MoreThe Medical Equipment Rental Industry1542 Words   |  7 PagesThe market size of the medical equipment rental industry has seen a large increase over the past five years. Starting in 2009, the market has seen an increase due to both a recession and the rising costs of medical equipment (Turk). Because of both of these factors, medical facilities have been forced to cut back and find new ways to save money. Through this industry, hospitals have begun to rent their medical equipment rather that to buy it, saving the facilities money while not hurting patientRead MoreThe Ultimate Test Of A Moral Society867 Words   |  4 Pagescontemplating the answer to this question. He reached for a p en and paper and began writing down his goals. A few years later, he was honored by the Ministry of Education for maintaining a level of excellence in high school. He then graduated from Medical College with an honor degree, marking the start of a new chapter in his life. I was that boy. My nephew, Abdulaziz, has Cerebral Palsy. One day, my sister called me at midnight and told me Abdulaziz was sick. I took him to a hospital immediatelyRead MoreThe Assigned Task Was To Determine What Job Or Graduate1014 Words   |  5 Pagesgraduate program I may want to apply to based on my interests and qualifications. Through exploration and research, I found that JHHM and UMMC are the best options for my career aspirations. Both are great institutes for obtaining a job or getting accepted into a program, but I feel that JHHM is the right place for the job I would like, and UMMC has the best opportunity for my academic growth. Job: Medical Assistant (MA) Johns Hopkins Healthcare Medicine (JHHM) is one of the most reputable and diverse healthcareRead MoreThe Most Important Event Or Non Academic Activity Essay1499 Words   |  6 Pageshurricane Katrina. Through my engagement in community outreach programs I have found that many of these disadvantage families tend to forgo consultation with a physician for reasons stemming from lack of physician trust and therapeutics that clash with personal beliefs. As a result of this and other factors, there is a failure to deliver quality health care to lower socioeconomic areas. No matter which underserved area I have lived in the same factors seem to be affecting the health care of the individualsRead MoreWhat Are Hela Cells And How Were They First Obtained?901 Words   |  4 Pageswho suffered from cervical cancer. Her cells have helped change the world of medicine. 6) What is the feeling of her family about the use of HeLa cells? The Lacks family was not informed that Henrietta’s cells were being used in research. They learned this 25 years later and they were devastated and confused. The family had no understanding of what occurred or why. The family has gotten to point in their lives where they have come to understand the situation where they have saidRead MoreAnnotated Bibliography1329 Words   |  6 Pagesï » ¿ Annotated Bibliography Galen College of Nursing Annotated Bibliography Mayo Clinic (2011). Personal health record: A tool for managing your health. Retrieved from http://www.mayoclinic.com/health/personal-health-record/MY00665 This source talks about how electronic health records makes it easy to gather and manage medical information in a secure location (Mayo Clinic, 2001, pg. 1). They explain what a health record is and what goes into it. The advantages and disadvantages toRead MoreApplying A Graduate School Is Looking Into What Interest You At Each School925 Words   |  4 Pagesyou in each school. This report discusses three different graduate programs in different graduate schools that offer with admission requirements that include, but not limited to, grade points average (GPA), graduate record examinations (GRE), Personal Statement, and transcripts. Moreover, it also provides information in regards of the intangibles of each program such as costs, location, and funding like assistanceships and scholarships. The first graduate program that interests me is a master of scienceRead MoreThe Economics Of Pediatric Head Injury861 Words   |  4 PagesPERSONAL STATEMENT Sonia Singh, United Kingdom, Health Economics The Economics of Pediatric Head Injury Growing up in India I was told that as a girl, education would make me a suitable bride. With a passion for learning and desire to be independent, rebelling against the tradition of marriage after high school, I applied for entrance to medical school instead. Acceptance in to one of the best medical schools in India, the Armed Forces Medical College, changed my life by exposing me to strong women