سليمان العمرو

مجال
التميز

تميز
دراسي وبحثي، وإبداعي علمي

البحوث المنشورة

البحث (1):

عنوان البحث:

Behavioural
API based Virus Analysis and Detection

رابط الوصول:

Link

تاريخ النشر:

May
2012

موجز عن البحث:

The
growing number of computer viruses and the detection of zero day malware have
been the concern for security researchers for a large period of time.
Existing antivirus products (AVs) rely on detecting virus signatures which do
not provide a full solution to the problems associated with these viruses.
The use of logic formulae to model the behaviour of viruses is one of the
most encouraging recent developments in virus research, which provides
alternatives to classic virus detection methods. To address the limitation of
traditional AVs, we proposed a virus detection system based on extracting
Application Program Interface (API) calls from virus behaviours. The proposed
research uses a temporal logic and behaviour-based detection mechanism to
detect viruses at both user and kernel level. Interval Temporal Logic (ITL)
will be used for virus specifications, properties and formulae based on the
analysis of API calls representing the behaviour of computer viruses.

البحث (2):

عنوان البحث:

Application of Fuzzy
Logic in Computer Security and Forensics

رابط الوصول:

Link

تاريخ النشر:

February
2012

موجز عن البحث:

Due to
the growing reliance that corporations and government agencies place on their
computer networks, the significance of defending these systems from attack
cannot be underestimated. A single malicious encroachment into a computer
network can cause a great deal of damage to an organisation. Computer
Security concerns the protection of information and property from misuse by
unauthorized people. Computer forensics provides methods for the
preservation, collection, validation, identification, analysis, interpretation,
documentation and presentation of digital evidence derived from digital
sources for the reconstruction of criminal activities or policy violation.
Fuzzy logic can properly be used to help deal with issues associated with
computer security and computer forensics. This chapter deals with the use of
fuzzy logic in computer security and forensics, providing a general overview
of some of its applications, recent algorithms, abilities, advantages and
drawbacks.

البحث (3):

عنوان البحث:

Evolutionary
Computation in Computer Security and Forensics: an Overview

رابط الوصول:

Link

تاريخ النشر:

2012

موجز عن البحث:

In daily life,
people are faced with problems that have more than one solution. In
computing, and other fields, researchers and developers encounter
computational problems that may have a large number of solutions. In these
cases, it may be almost unfeasible to determine the best one. Evolutionary
computation is an appropriate technique for finding an optimal solution to a
problem. Among these problems, evolutionary computation can provide an
efficient way to solve those associated with computer security and forensics.
This chapter examines the approaches evolutionary computation offers to
discover an optimal solution to a problem. Moreover, it overviews how
evolutionary computation can be applied to different scenarios related to
computer security and forensics.

المؤتمرات العلمية:

المؤتمر (1):

عنوان المؤتمر:

The 6^th
IEEE International Conference on Risks and Security of Internet and Systems
(CRISIS 2011)

تاريخ الإنعقاد:

September
2011

بلد
ومكان الإنعقاد:

Timisoara,
Romania

طبيعة المشاركة:

Research
Paper

عنوان المشاركة

Behaviour-based Virus Detection System using
Interval Temporal Logic

الملخص

Every day, the
growing number of viruses causes major damage to computer systems. Existing
antivirus products do not provide a full solution to the problems associated
with viruses. One of the most encouraging recent developments in virus
research is the use of logic formulae to model the behaviour of viruses,
which provides alternatives to classic virus detection methods. The proposed
research uses temporal logic and behaviour-based detection mechanism to
detect viruses. Interval Temporal Logic (ITL) will be used to generate virus
specifications, properties and formulae based on the analysis of the
behaviour of computer viruses. The detection mechanism will use Tempura, the
executable subset of ITL, i.e., satisfaction of a Tempura formula means a
virus has been detected. The process will also use AnaTempura, an integrated
workbench tool for ITL that supports our system specifications. AnaTempura
will offer validation of the ITL specifications and detects whether a virus
has occurred or not.

المؤتمر (2):

عنوان المؤتمر:

The 6^th
Saudi Scientific International Conference (SIC)

تاريخ الإنعقاد:

October
2012

بلد
ومكان الإنعقاد:

Brunel,
UK

طبيعة المشاركة:

Poster

عنوان المشاركة

Computer
Virus Detection System

الملخص

Existing antivirus
(AV) use signatures to detect viruses and therefore, AV do not provide a full
protection by not detecting unknown viruses. The use of formulae to model the
behaviour of viruses provides alternatives to classic virus detection
methods. The proposed research uses Interval Temporal Logic (ITL) and its
executable subset Tempura to track API calls issued by these viruses and then
detect them

جوائز التكريم:

الجائزة (1):

مسمى الجائزة:

Best
Paper Award

الجهة المانحة:

International
Journal of Computer Science and Information Security

تاريخ منح  الجائزة:

May 2012

مجال التكريم:

Best Paper
Award 2012 from the International Journal of Computer Science and Information
Security (IJCSIS)