مجال التميز

تميز دراسي وبحثي، وإبداعي علمي

البحوث المنشورة

البحث (1):

عنوان البحث:

Behavioural API based Virus Analysis and Detection

رابط الوصول:

Link

تاريخ النشر:

May 2012

موجز عن البحث:

The growing number of computer viruses and the detection of zero day malware have been the concern for security researchers for a large period of time. Existing antivirus products (AVs) rely on detecting virus signatures which do not provide a full solution to the problems associated with these viruses. The use of logic formulae to model the behaviour of viruses is one of the most encouraging recent developments in virus research, which provides alternatives to classic virus detection methods. To address the limitation of traditional AVs, we proposed a virus detection system based on extracting Application Program Interface (API) calls from virus behaviours. The proposed research uses a temporal logic and behaviour-based detection mechanism to detect viruses at both user and kernel level. Interval Temporal Logic (ITL) will be used for virus specifications, properties and formulae based on the analysis of API calls representing the behaviour of computer viruses.

البحث (2):

عنوان البحث:

Application of Fuzzy Logic in Computer Security and Forensics

رابط الوصول:

Link

تاريخ النشر:

February 2012

موجز عن البحث:

Due to the growing reliance that corporations and government agencies place on their computer networks, the significance of defending these systems from attack cannot be underestimated. A single malicious encroachment into a computer network can cause a great deal of damage to an organisation. Computer Security concerns the protection of information and property from misuse by unauthorized people. Computer forensics provides methods for the preservation, collection, validation, identification, analysis, interpretation, documentation and presentation of digital evidence derived from digital sources for the reconstruction of criminal activities or policy violation. Fuzzy logic can properly be used to help deal with issues associated with computer security and computer forensics. This chapter deals with the use of fuzzy logic in computer security and forensics, providing a general overview of some of its applications, recent algorithms, abilities, advantages and drawbacks.

البحث (3):

عنوان البحث:

Evolutionary Computation in Computer Security and Forensics: an Overview

رابط الوصول:

Link

تاريخ النشر:

2012

موجز عن البحث:

In daily life, people are faced with problems that have more than one solution. In computing, and other fields, researchers and developers encounter computational problems that may have a large number of solutions. In these cases, it may be almost unfeasible to determine the best one. Evolutionary computation is an appropriate technique for finding an optimal solution to a problem. Among these problems, evolutionary computation can provide an efficient way to solve those associated with computer security and forensics. This chapter examines the approaches evolutionary computation offers to discover an optimal solution to a problem. Moreover, it overviews how evolutionary computation can be applied to different scenarios related to computer security and forensics.

المؤتمرات العلمية:

المؤتمر (1):

عنوان المؤتمر:

The 6^th IEEE International Conference on Risks and Security of Internet and Systems (CRISIS 2011)

تاريخ الإنعقاد:

September 2011

بلد ومكان الإنعقاد:

Timisoara, Romania

طبيعة المشاركة:

Research Paper

عنوان المشاركة

Behaviour-based Virus Detection System using Interval Temporal Logic

الملخص

Every day, the growing number of viruses causes major damage to computer systems. Existing antivirus products do not provide a full solution to the problems associated with viruses. One of the most encouraging recent developments in virus research is the use of logic formulae to model the behaviour of viruses, which provides alternatives to classic virus detection methods. The proposed research uses temporal logic and behaviour-based detection mechanism to detect viruses. Interval Temporal Logic (ITL) will be used to generate virus specifications, properties and formulae based on the analysis of the behaviour of computer viruses. The detection mechanism will use Tempura, the executable subset of ITL, i.e., satisfaction of a Tempura formula means a virus has been detected. The process will also use AnaTempura, an integrated workbench tool for ITL that supports our system specifications. AnaTempura will offer validation of the ITL specifications and detects whether a virus has occurred or not.

المؤتمر (2):

عنوان المؤتمر:

The 6^th Saudi Scientific International Conference (SIC)

تاريخ الإنعقاد:

October 2012

بلد ومكان الإنعقاد:

Brunel, UK

طبيعة المشاركة:

Poster

عنوان المشاركة

Computer Virus Detection System

الملخص

Existing antivirus (AV) use signatures to detect viruses and therefore, AV do not provide a full protection by not detecting unknown viruses. The use of formulae to model the behaviour of viruses provides alternatives to classic virus detection methods. The proposed research uses Interval Temporal Logic (ITL) and its executable subset Tempura to track API calls issued by these viruses and then detect them

جوائز التكريم:

الجائزة (1):

مسمى الجائزة:

Best Paper Award

الجهة المانحة:

International Journal of Computer Science and Information Security

تاريخ منح  الجائزة:

May 2012

مجال التكريم:

Best Paper Award 2012 from the International Journal of Computer Science and Information Security (IJCSIS)