Behaviour-based virus detection system using Interval Temporal Logic

Abstract

Every day, the growing number of viruses causes major damage to computer systems. Existing antivirus products do not provide a full solution to the problems associated with viruses. One of the most encouraging recent developments in virus research is the use of logic formulae to model the behaviour of viruses, which provides alternatives to classic virus detection methods. The proposed research uses temporal logic and behaviour-based detection mechanism to detect viruses. Interval Temporal Logic (ITL) will be used to generate virus specifications, properties and formulae based on the analysis of the behaviour of computer viruses. The detection mechanism will use Tempura, the executable subset of ITL, i.e., satisfaction of a Tempura formula means a virus has been detected. The process will also use AnaTempura, an integrated workbench tool for ITL that supports our system specifications. AnaTempura will offer validation of the ITL specifications and detects whether a virus has occurred or not.