Towards Smart Anti-Malwares for Battery-Powered Devices
Towards Smart Anti-Malwares for Battery-Powered Devices
复制标题
面向电池供电设备的智能反恶意软件
DOI：
--
复制
发表时间：
2012
期刊：
影响因子：
--
通讯作者：
A. Mourad
中科院分区：
文献类型：
--
作者：
Hajer Al Housani;Hadi Otrok;R. Mizouni;J. Robert;A. Mourad
反恶意软件程序（AM）是众所周知的功能强大的安全工具，可以防止恶意活动。基于行为的人工智能被认为是检测移动设备中未知恶意软件的合适人选。通常，AM提供不同级别的安全性，即高、中、低。低等级在低概率攻击的情况下提供最低限度的基本检查，而高等级在高概率攻击的情况下提供密集检查。尽管基于行为的反恶意软件效率高，但仍然被认为是资源消耗者，特别是在高检测水平下，这大大降低了手持设备的使用寿命。此外，当前的反恶意软件还不能明智地决定何时在这些级别之间转换，以减少资源消耗和错误警报，同时又不会降低所需的安全级别。为了缓解这一问题，我们提出了一种智能反恶意软件，它可以根据资源受限设备的资产价值和电池状态在不同的安全级别之间转换。这种决策是通过非零和非合作博弈理论模型实现的。
Anti-malware programs (AM) are well-known powerful security tools that protects against malicious activities. Behaviour-based AMs are seen as suitable candidates to detect unknown malwares in mobile devices. Usually, AM offers different levels of security namely high, medium, and low. The low level offers minimal basic checks in case of low probability of attacks while the high level offers intensive checks in situations of high probability of attacks. Despite their efficiency, behaviour-based anti-malwares are still considered as resource consumer especially in high detection level which reduces considerably the lifetime of handheld devices. In addition, current anti-malwares are not smart to decide when to shift across those levels to reduce both resources consumption and false alarms without scarifying the security level required. To alleviate this problem, we propose a smart anti-malware that can shift between different security levels according to the assets value and the battery status of the resource-constrained device. Such decision is made possible using a nonzero-sum non-cooperative game theoretical model.