Adaptive immunity of the operating system (AIOS)

The Tomsk university of management systems and radio electronics (TSUCSR) develop a system which will be able to provide absolute virus detection in the computer and to define their authors^[1].

"Antiviruses which exist now have no function of recognition of the malicious software. They can detect only that virus which is already known and brought in library. Therefore regular updates are required for them, and there is a problem with detection of malware which are not in bases yet — the head of department of intellectual property of student's business incubator of TSUCSR Evgeny Garin explains. — Besides viruses constantly evolve, can samoobuchatsya and change the behavior. Our algorithms do not check ranks for coincidence. They look at structure of the software".

The basic principle of work of "Adaptive immunity of the operating system" (AIOS) is identification in programs of elements of artificial intelligence. The algorithms developed in TUSUR allow to detect in a program code of function of recursive replication — capability of a virus body to samokopirovatsya — and other signs of a self-regulating system similar to a live organism.

"At our anti-virus software there are a lot of analogies to the real immune system — Evgeny Garin says. — Now the antivirus, figuratively speaking follows tablets in shop of the producer: if there is no medicine for this infection, the computer will die because it has no own "immunity". AIOS checks a program code for signs of injuriousness, working as immune protection".

New methods of coding and data processing allow to increase high-speed performance of antivirus software and to reduce computing costs. Thanks to this AIOS can work on the personal computer independently, without connection to Network.

"Our market research showed that 65% of users do not trust antiviruses which at them are set, being afraid that these programs can download personal information. If we offer the antivirus which is built in the operating system and is not connected with external resources, the trust to such product in the market will be more" — the representative of TSUCSR considers.

According to Evgeny Garin, essentially new approaches will allow to reach 100 percent recognition of viruses — any known product cannot boast of such results.

"So far the program crude also does not detect viruses for hundred percent, but the concept says that this limit is quite achievable" — Garin emphasized.

Developers also intend to achieve that AIOS not only detected a virus, but also could define his author by the analysis of the text of a program code. Creation of library of authors of the malware will become the next step.

"Work on AIOS began about three years ago — Evgeny Garin tells. — Now developers are engaged in the publication of mathematical algorithms and other techniques which cannot be patented. On creation of the ready program about two more years can leave".

Notes