Artificially Intellegent Antivirus Systems
WEB 2.0 base application like Forums/Blogs are proving to be the ultimate solution to provide rapid reporting of viruses, spyware and other threats.
How People Get Helped These Days
An ordinary user usually posts some problems with his/her system in a very non-technical way. Usually, Geeks at the forums/Blogs try to understand this and they try to help the poor guy/girl. There has been a great use of an application called “HijackThis” on windows systems. HijackThis or IceSword inspect the compromised system and produce a log file which can help those geeks to understand the behavior of the problem.
On the basis of previous experiences or their own trust of any antivirus/antispyware application, people try to help others on such social websites. Most of the times, this solves their problem.
Antivirus Should Behave Like a Forum Geek
This whole process can be formalized in a manner that software vendors can build such applications which try to mimic behavior of the helper on those blogs/forums. This is not too complex; the process can be as simple as to extract information from a forum thread.
On the basis of keywords in the thread/question; and a log generated by HijackThis, IceSword or similar programs can produce a formatted report to the software vendors. The functionality of log generators mentioned earlier can also be integrated inside the antivirus tool.
A user may have a reporting facility inside the application and they may auto-format and classify problem, most of the times, the existing virus defs may solve the problem, and detect any variants of a similar virus.
They should be smart enough to build their knowledgebase from the given input which may be poorly formatted as mentioned earlier.
For instance, a user may see 'my computer' changed to something else in a windows environment, this is not harmful but could be a virus activity, A.V. system should be able to fix registry entries and may record this as a viral activity and may keep this in their knowledgebase and should prevent this from happening again.
Don't remove the virus only
Many antiviruses today do detect most of the harmful entities and they can eliminate them as well, but they never have any idea how to fix the damage that has been caused by the virus they have deleted/eliminated from a computer system, e.g. On a windows system, many times when a virus is detected by a A.V. system, its rare that they fix say, corrupted registry values. I hope A.V. Companies should think about these features in the near future.
Software Engineer, Working in a well-known Organization.
Im found on Right Here
You can read more posts here:
Ai Enabled Antivirus Software
No comments:
Post a Comment