Antivirus Protection Research Articles

Recommendation mobile antivirus for Android smartphones based on malware detection

<p>The proliferation of smartphone malware attacks due to a lack of vigilance in app selection raises serious concerns. Built-in smartphone security features often must be improved to protect devices from these threats. Although numerous articles recommend top-tier antivirus solutions, there need to be more reliable data sources that raise suspicions about undisclosed promotional motives. This research endeavors to establish a ranking of antivirus efficacy to provide optimal recommendations for Android smartphone users. The research methodology entails a meticulous comparison of malware detection and labeling outcomes between various antivirus programs within Virustotal and the labeling system employed by the Euphony application. The comparative results are categorized into three groups: antivirus solutions proficient in identifying specific malware types, those detecting malware presence without categorization, and antivirus software failing to detect malware effectively. The experimental findings present the five leading antivirus solutions, ranked from the highest to lowest scores, as Ikarus, Fortinet, ESET-NOD32, Avast-Mobile, and SymantecMobileInsight. Based on the comprehensive assessment conducted in this study, these solutions are recommended as the top antivirus choices. These recommendations are poised to significantly aid users in selecting the most suitable antivirus protection for their Android smartphones.</p>

Методика разработки web-приложения для управления робототехническими комплексами

The purpose of the study is to develop a web application for control systems of robotic complexes (RTK) using the example of RTK with MP-11 robotic manipulators. The structure of the control system includes a controller on the Arduino Mega 2560 Pro Mini board with a loaded low-level program and an upper-level program. A web application has been selected as a software component. This type of application consists of a server and a client part. Data is exchanged between them over the network using the HTTP protocol. The application is built on the Microsoft .NET platform and the ASP .NET WebForms framework. The web server is a computer connected via a USB cable to the controller and currently used for a desktop application. The description of the web pages of the developed web application and its operation, algorithms of functioning, indicating the specifics of execution for this type of program is given. The program provides manual and automatic operation modes, as well as control of not only the RTK, but also its model. This type of management system involves multi-user mode and network transmission, two types of user rights and authentication have been developed to ensure the security of the complex, as well as antivirus protection, network settings for protection against unauthorized access are used. Guest access allows you to control only the robot model, in order to ensure the safety of the equipment. The main advantages of a web application are its cross-platform nature, i.e. the ability to work on any devices and operating systems, as well as the absence of the need for installation.

Network Security with Virtual Reality based Antivirus Protection and Reduced Detection Delays

Addressing the persistent delay problem in traditional network security antivirus protection systems, this paper introduces an innovative approach utilizing virtual reality (VR) technology. The primary objective is to significantly reduce detection delays and enhance the efficiency of network security measures. An enhanced decision-making algorithm is proposed to identify relevant features associated with network security. These features are then weighted and optimized to improve the overall detection process. An injection list is generated through web crawling techniques to strengthen security measures. A virtual protection block is also developed to serve as a barrier against potential threats. The proposed method claims a detection delay of only 75.33 milliseconds, significantly outperforming two traditional methods that recorded 290.11 milliseconds and 337.30 milliseconds, respectively. This substantial decrease in detection delay emphasizes the effectiveness of automatic detection within the context of VR technology. Practical implementation and empirical evidence further validate the success of this approach. The automatic detection of network security vulnerabilities within the VR technology framework is efficient and exhibits considerable progress. As such, this research offers a promising solution to the delay problem in network security antivirus protection. Embracing VR technology achieves shorter detection delays, ultimately improving the security posture of network systems.

Теоретические основания для реализации методического аппарата оптимизации механизмов антивирусной защиты резидентного типа

The urgency of the problem of improving the methodological apparatus, which allows to scientifically substantiate the conditions for the effective use of resident-type antivirus tools in computer systems, is stated. The possibility of solving this problem by optimizing the time resources of these systems is being considered. The formal representation of the indicator of the timeliness of the implementation of the information process in a computer system is substantiated. The theoretical grounds for the development of a methodological apparatus for optimizing the mechanisms of resident-type antivirus protection are formulated. The corresponding statements are proved.

Analysis of the capacity of existing anti-virus protection systems and their based methods for detecting new malware in military information systems

The article solves the task of analyzing the ability of existing anti-virus systems and the methods based on them to detect new malicious software in information systems of critical infrastructure, in particular, the sector of the state defense forces. It is noted that the official data of the developers of antivirus systems often do not confirm the declared level of accuracy of detecting new malicious software in practice. In addition, in most cases, the declared accuracy rate of detecting new malware is higher than the similar rate of detection of known malware, which indicates that the antivirus systems in question are tested in specific conditions that are too different from real ones. The properties of new malicious software are described in order to find the most suitable class of computer viruses. Classes of polymorphic (oligomorphic) and metamorphic viruses demonstrate the most complete compliance with the specified properties, which allows us to assert their significant share in the use of new malicious software. The characteristics of malicious software detection methods are given, which due to their properties are able to adapt to a certain extent to their metamorphic (polymorphic) nature. Methods based on the theory of fuzzy logic demonstrate the most complete correspondence. The direction of improvement of the existing anti-virus systems in order to increase the adaptability to the detection of new (polymorphic, metamorphic) classes of malicious software is proposed. The obtained results should be considered as a basis for the implementation of new approaches to the detection of malicious software in order to identify previously unknown instances of it, which will allow to significantly increase the effectiveness of ensuring cyber security of modern information systems and networks.

Fraud in a digital society in the context of social change

The article analyzes the problems of fraud in the modern digital society in the context of social changes caused by both the COVID-19 pandemic and the current geopolitical situation. The authors study in detail the types of financial fraud in this area. They pay special attention to the types of digital fraud: telephone fraud and IP-telephony, SMS fraud, phishing, sniffering (message interception), skimming (theft of card data), which are associated with the emergence of cryptocurrencies. The article presents the data of the authors’ sociological research conducted by the method of an online questionnaire survey (n = 765). The study showed that only 44 % of respondents are sufficiently informed about the types of fraud to protect themselves from modern internet scammers. An analysis of data on certain types of digital fraud showed that 20 % of respondents lost money due to telephone or Internet fraud, 16 % of respondents personally encountered IP telephony, and 40 % have no idea about such a type of fraud as sniffering and existing anti-virus protection against it. The research also showed the vulnerability, first of all, of the male half of the population over 40 years of age in the field of internet fraud. Therefore, public authorities, together with the media, business and other actors of Russian society, need to strengthen the policy in the field of improving the level of financial and digital literacy of the population.

Metal–Peptide Complexes with Antimicrobial Potential for Cotton Fiber Protection

A study of the formation of copper (II) complexes with hemorphin peptide motifs in alkalic water solutions is presented. The effect of the peptide ligand on the complexing properties of the Cu (II) ion was quantified by giving the stoichiometry and stability of the complex compounds in the medium in which they are formed using voltammetric (cyclic) and spectral (UV-Vis and fluorimetric) analytical techniques. The resulting complexes were examined via IR spectroscopy to detect M-N and M-O oscillations and using the EPR approach in solution and in the solid phase to view the coordination and ligand binding regime. The possibility of the synergistic action of copper ions in the antivirus protection processes of cotton fibers coated in the same solvent with the newly obtained complex compounds was also investigated. One of the advantages is the formation of the complexes in an environment where the immobilization takes place, which contributes to increasing the efficiency of the process. The obtained results may serve as an aid for future more detailed biological studies of structure-activity relationships (SARs).

ИССЛЕДОВАНИЕ ИСПОЛЬЗОВАНИЯ АНТИВИРУСНЫМИ СРЕДСТВАМИ ВРЕМЕННЫХ РЕСУРСОВ КОМПЬЮТЕРНОЙ СИСТЕМЫ

The paper is devoted to the study of factors affecting the timeliness of response to the effects of malicious software. The analysis of anti-virus protection tools in computer systems is carried out. The analysis is based on expert assessments of protection measures against the effects of malicious software and expert assessment of the time parameters of anti-virus tools. The requirements for the time characteristics of anti-virus tools in the computer systems are defined and justified. The paper provides options for the formal presentation of characteristics for assessing the implementation of information processes in the computer systems and the timeliness of responding to the effects of the malicious software. The characteristics that clarify the model of information security threat in the computer systems are analyzed by taking into account the specifics of the use of the malicious software. The substantiation of mathematical abstraction for the formal representation of a sequence of random events associated with the implementation of the threat of the impact of the malicious software on the computer systems is given, analytical expressions are obtained to evaluate anti-virus protection measures and the actions of the violator to implement unauthorized access. Hypotheses are formulated and proved regarding the adequacy of the use of a temporary computer systems resource by antivirus tools.

The role of antivirus protection in the formation of the ecosystem and immune system of corporate information systems

The article examines the need for the formation of an ecosystem, a corporate information system with a strong immune system, which, together with antivirus protection, provides a sufficient level of cyber protection of the entire system for the possibility of stable and stable functioning of large corporate information systems. The need to take into account the fact that modern corporate information systems are formed on the basis of neural systems, artificial intelligence and the Internet of Things was also noted. This determines the need for a complex approach to the selection of an antivirus software product, which must be harmoniously integrated into the general architecture of the information system to ensure a high level of antivirus protection. An analysis of available anti-virus software products has shown that the vast majority of them are effective for home use. For corporate information systems, it is necessary to choose an antivirus product based on the recommendation and technical support of the vendor company, which is responsible for the entire software product used in the system being built.

Разработка алгоритма выявления вредоносных программ для платформы Android путем проведения анализа файла манифеста

The available algorithms for detecting malicious software are often not enough to detect new types of viruses. In this regard, the issues related to the use of reverse engineering of malicious software codes intended for the Android operating system are considered. It is proposed to conduct a comprehensive analysis of the code and manifest of the mobile application in order to form the attributes of malicious software and create detection algorithms for a specific operating system. Research objective: to show the relevance of reverse engineering and to develop a heuristic analysis algorithm that allows detecting the presence of hidden malicious code in mobile applications by analyzing code metadata. Methods: the article uses the reverse engineering method on the example of actual Trojans to form attributes that characterize the possibility of hidden malicious code in a mobile application, according to the logical values of which the algorithm makes a cumulative decision about the possibility of hidden malicious load. Results: the proposed approach was tested using the VirusTotal database to evaluate errors of the first and second kind and showed 78% efficiency in detecting malicious software only from code metadata using the proposed attributes, does not require complex calculations and time-consuming costs and can be the basis for using artificial intelligence in combination with static and dynamic analysis to identify viruses of the Android operating system. Practical significance: the developed algorithm can be used as an additional element in the integrated antivirus protection system of a smartphone against malware infection.

Функциональное представление процедур подавления вредоносной активности в операционной среде компьютерной системы

This article is the final one in a series of articles devoted to the functional representation of anti-virus protection measures in computer systems. It describes the functional model of the second stage of the process of preventing threats from the impact of malware on computer systems information resources - the stage of suppressing malicious activity in the operating environment of these systems. The results of the functional decomposition of this stage to the level of functions implemented in the process of performing procedures for auditing the normal functioning of the operating environment for the manifestation of anomalies in its behavior and response to manifestations of the threat of exposure to malware are presented. Mathematical models of time characteristics of these procedures are given

Функциональное моделирование как инструмент формализации процесса антивирусной защиты в компьютерных системах

This article continues a series of articles devoted to the use of the methodical apparatus of functional modeling for the study of problems in the field of computer virology. It considers the possibility of using this device in the interests of solving an important and relevant problem for the methodology of information security - the problem of developing mathematical models that characterize the capabilities of anti-virus protection mechanisms in computer systems to prevent threats from the impact of malicious software on the information resources of these systems. A general mechanism for decomposition of the target function of anti-virus protection is presented. Its detailing into separate stages and procedures is considered. Mathematical models of the time characteristics of the stages and the objective function are given.

Функциональное представление процедур предупреждения вредоносной активности в компьютерной системе

This article is the fifth in a series of articles devoted to the application of the methodological apparatus of functional modeling for the study of problems in the field of computer virology. It describes the functional model of the first stage in the implementation of anti-virus protection measures in computer systems - the stage of preventing malicious activity. The results of functional decomposition to the level of functions implemented in the process of executing the procedures of this stage are presented. Mathematical models of time characteristics of procedures are given

NETWORK ANOMALY DETECTION BASED ON WEIGHTED AGGREGATION TAKING INTO ACCOUNT NODAL PARAMETERS

The bulk move of employees to a remote mode of work, as well as the intensified information confrontation, led to the emergence and aggravation of many problems related to security in corporate networks. Cases of attacks on local area networks, in particular, using phishing and social engineering techniques, distribution of malicious code, and DDoS attacks, have become more frequent. To ensure the security of corporate networks, layered protection systems, including intrusion detection systems, firewalls, antivirus protection tools, various system analyzers etc., are increasingly being used. The use of several types of information protection tools not only reduces the load on individual tools, but also facilitates ability to identify actual attacks on the protected system. This article proposes a hybrid approach to anomaly detection, taking into account the parameters of the end nodes of the network. Enriching with values of these parameters makes it possible to detect low-intensity distributed attacks, thereby increasing the accuracy of the defense system. The transformation of parameters of network end nodes to the format of network session parameters is implemented using regrouping and dimensionality reduction. Ensembles of classifiers which inputs receive the session parameters and the parameters of the network nodes respectively, provide determining anomalies. Ensembles are based on logistic regression, stochastic gradient descent and decision trees. Combining of the classification results is accomplished through the weighted aggregation with anxiety threshold as a weighting factor. An experimental evaluation of the developed approach showed its advantages in comparison with the detection of anomalies without taking into account the parameters of the nodes.

Association between workplace and mental health and its mechanisms during COVID-19 pandemic: A cross-sectional, population-based, multi-country study

BackgroundThe COVID-19 pandemic worsens populations' mental health. However, little is known about the COVID-19-related mental health among remote workers. MethodsWe retrieved data from survey of Health, Ageing and Retirement in Europe, covering 27 countries. Eligible people were those employed. The main outcome is the mental disorder, covering four aspects: depression, anxiety, sleep disorder, and loneliness. Country-specific weighted mixed models were fitted to estimate the association of workplaces with mental health, controlled for age, gender, education level, living alone, making ends meets, working hours, closing to suspected or confirmed COVID-19 cases, received anti-virus protection, social contact, disability, and chronic disease. Moderate analyses were conducted to explore possible mechanisms. Results11,197 participants were included, among them 29.3% suffered at least one worse mental disorder. After controlling for covariates, compared with those who worked at the usual workplace, those who worked at home only or part of the time did not associate with worse mental disorders (p-value ≥0.1395), and those who worked at neither the usual workplace nor home had a 55% higher likelihood of suffering from worse mental disorders (OR = 1.55, 95%CI 1.03–2.36). The mediation analyses identified three indirect pathways by which workplaces influence mental health, including making ends meets, social contact, and receiving anti-virus protection. Detailed results on subtypes of mental disorders were also provided. LimitationsAll assessments were self-reported, resulting in a risk of method bias. ConclusionsDuring the COVID-19 pandemic, working at other places, neither at the usual workplace nor home, worsened mental health. Evidence provided in this study will contribute to more nuanced and practical public health policy strategy making.

Cyber insecurity in the wake of COVID-19: a reappraisal of impacts and global experience within the context of routine activity theory

Shortly after the enthronement of COVID-19 on the global continent, cyberspace became a dominant arena for social, economic, religious, educational, recreational and political activities across the world. This paper draws insights from the existing literature to illustrate how COVID-19 has provided situational opportunities for cyber criminals to strike and exploit people of their valuable resources through creating fraudulent websites as well as spreading of malware and ransomware to vulnerable users. To this end, routine activity theory becomes very dominant and crucial in understanding the underlying basis for the increased cybercrimes that currently characterize the cyber space. The study demonstrates that the twin phenomenon of coronavirus and cyber insecurity has not only instilled fears into the hearts of cyber users but has also negatively impacted the global economy in various ways that cannot be quantified by any study. Since all measures put in place to contain the threats of the horrible virus, have, hitherto, remained counterproductive, the paper recommends essential cyber hygiene practices (such as, antivirus protection, malware and phishing awareness, weak spots identification, intelligent techniques, risk management approach, zero trust design, home network security and general cybersecurity awareness) as a coping strategy to salvage both the public health and security sectors from the twin occurrence of Covid-19 pandemic and cyber insecurity, which has respectively inflicted and claimed millions of lives, and jeopardized significant portions of the global economy. Providing a continued cyber-safe remote-working environment for employees will be of ultimate measure

The optimum assessment of the information systems of shipboard hardware reliability in cloud services

The world wide pandemic situation revealed the problems in all spheres of human life which haven’t been faced before. Recently the world has changed greatly as well as the relationship between people and their professional activity. The great bunch of the workload, if basically acceptable, is done with the use of modern innovative technologies. Such problems have not trampled down the sphere of higher education as well. Distance learning, which was previously addressed to only as accompanying possibility of lessons conduct, nowadays is considered to be the only practicable form of conducting lectures, practical lessons, tests, i.e. it has become a usual daily practice for both teachers and students. Among the basic functional requirements to the electronic educational resources in the system of distance learning there are the visualization and interaction principles both when getting familiar with the theoretical material and when completing virtual laboratory and practical tasks. The Microsoft Office documents have become the most widespread elements among the electronic educational resources. That is why there is a pressing need in presenting the electronic MS Excel spreadsheets on the resource web-pages. The simple and convenient way to solve the problem of Excel documents introduction into the electronic resources of the distance learning systems is the use of cloud services. The services help to acquire the access to the information resources of any level and of any capacity with the possibility to allocate the rights of the users belonging to different groups in relation to the resources. For that purpose the availability of the Internet network access and web-browser would be enough \cite{Kravtsova2020}. The cloud calculation technologies introduction allows for the use of the programs that do not require special licensing, update versions monitoring and eliminates the need of software technical support as the provider himself exercises control over the functioning, data saving, antivirus protection and possible cyberassaults.The peculiarities of professional training of navigators require the students to acquire the knowledge of professionally-oriented tasks algorithms as well as the knowledge of technologies that can help to implements them. One of the main routines the officer needs to deal with on the navigational bridge is the use of the information systems of shipboard hardware. But before usage he needs to assure of the systems reliability. That is why it is extremely important to gain during the course of professional training the necessary skills of navigation equipment exploitation reliability assessment by means of Microsoft Office documents and cloud services. So the subject matter of the suggested research is the procedure development for the navigation equipment exploitation reliability assessment by means of modern services use in the course of professional training of future seafarers. The aim of the paper is the solution of the problems of optimum assessment of the information systems of shipboard hardware reliability by means of cloud technologies usage. The following tasks are completed in the course of the research: the peculiarities and characteristics of navigational information processed by the shipboard navigation and information system have been analyzed; the results of the information systems of shipboard hardware usage have been studied; the technological diagram of the basic components structuring of the “Information systems of shipboard hardware” complex for the Master’s degree training course has been created; the effective technology of the program Excel documents processing has been chosen; the system of access and usage of web-services for calculation tables processing in the system of distance learning has been designed;the process of competency formation which will enable students to use cloud services has been suggested.

Python as an automation tool in IS. Monitoring the relevance of protection against malicious code

One of the necessary, periodically performed by information security (IS) department procedures is to assess the level of compliance of the actual state of any IS measure with the established requirements. These procedures involve a significant amount of manual work, which leads to a waste of time, human, technological resources. In this case it is not always possible to provide a high level of reliability of the results. To reduce costs, increase the degree of reliability and accuracy of the results of assessment of the IS state, and, accordingly, increase the level of confidence in the IS state assessment, it is possible by the use of “small automation” means when performing routine operations of collection, correlation, normalization, analysis of data sets. The most acceptable means of automation is the programming language python, which, in addition to convenience of use, powerful functionality, has an extensive analytical apparatus. This article discusses the use of python as a “small automation” tool for monitoring the relevance of antivirus protection system.

A Study on Types of Cyber Crimes and Cyber Attacks Today

Abstract: With the increasing number of COVID-19 cases in the world and deaths worldwide has given a very worse condition to the whole world besides this covid pandemic there is also increase in number of Cyber-crimes and Cyber-attack of different types in the whole world. As Technology is advancing everyday there is a rise in Cyber-crime problem today, however security measures and prevention to protect this technology and the users of the technology is not advancing as quickly. So, the aim of this study is to understand and learn different types of Cybercrimes and Cyberattacks today in the world. It is important to prevent and to put awareness about the types of crimes and attacks. There are some protective procedures such as keep your software Up to date, Using of Anti-Virus Protection and also the use of Firewall, Continuously Changing Passwords and keep it as strong as can be, and also two step or multi step authentication should be done whenever necessary. Keywords: Cyber-crimes, Cyber-attacks, Types of Cyber-crimes, Prevention Measures, Threats

Inhibition of Escherichia Virus MS2, Surrogate of SARS-CoV-2, via Essential Oils-Loaded Electrospun Fibrous Mats: Increasing the Multifunctionality of Antivirus Protection Masks.

One of the most important measures implemented to reduce SARS-CoV-2 transmission has been the use of face masks. Yet, most mask options available in the market display a passive action against the virus, not actively compromising its viability. Here, we propose to overcome this limitation by incorporating antiviral essential oils (EOs) within polycaprolactone (PCL) electrospun fibrous mats to be used as intermediate layers in individual protection masks. Twenty EOs selected based on their antimicrobial nature were examined for the first time against the Escherichia coli MS2 virus (potential surrogate of SARS-CoV-2). The most effective were the lemongrass (LGO), Niaouli (NO) and eucalyptus (ELO) with a virucidal concentration (VC) of 356.0, 365.2 and 586.0 mg/mL, respectively. PCL was processed via electrospinning, generating uniform, beadless fibrous mats. EOs loading was accomplished via two ways: (1) physisorption on pre-existing mats (PCLaEOs), and (2) EOs blending with the polymer solution prior to fiber electrospinning (PCLbEOs). In both cases, 10% v/v VC was used as loading concentration, so the mats’ stickiness and overwhelming smell could be prevented. The EOs presence and release from the mats were confirmed by UV-visible spectroscopy (≈5257–631 µg) and gas chromatography-mass spectrometry evaluations (average of ≈14.3% EOs release over 4 h), respectively. PCLbEOs mats were considered the more mechanically and thermally resilient, with LGO promoting the strongest bonds with PCL (PCLbLGO). On the other hand, PCLaNO and PCLaELO were deemed the least cohesive combinations. Mats modified with the EOs were all identified as superhydrophobic, capable of preventing droplet penetration. Air and water-vapor permeabilities were affected by the mats’ porosity (PCL < PCLaEOs < PCLbEOs), exhibiting a similar tendency of increasing with the increase of porosity. Antimicrobial testing revealed the mats’ ability to retain the virus (preventing infiltration) and to inhibit its action (log reduction averaging 1). The most effective combination against the MS2 viral particles was the PCLbLGO. These mats’ scent was also regarded as the most pleasant during sensory evaluation. Overall, data demonstrated the potential of these EOs-loaded PCL fibrous mats to work as COVID-19 active barriers for individual protection masks.