@article{bibcite_166, keywords = {antivirus software, artificial immune systems, behavioural model, Fuzzy Logic, Trojan life cycle, Trojans, Trojans detection}, author = {Sergiy Lysenko and Oleg Savenko}, title = {Software for Computer Systems Trojans Detection as a Safety-Case Tool}, abstract = {
This paper presents a behavioural model of Trojans which formalizes the features of Trojans performance in computer systems. The Trojans behavioural model represents its life cycle including three stages: penetration, activation and executing destructive actions. Software for Trojans detection was developed. It is based on methods of detection in {\textquoteleft}monitor{\textquoteright} and {\textquoteleft}scanner{\textquoteright} modes. Trojans detection in monitor mode is based on a novel technique for computer system Trojans detection which uses fuzzy logic. It enables a conclusion about the degree of danger of infecting the computer system with Trojans. Trojans detection in a scanner mode is based on a novel technique for constructing the protected sequences and generation of detectors based on algorithms for artificial immune systems. It allows to reveal the fact of system files substitution of Trojans{\textquoteright} versions. Trojan detection software allows to detect new Trojans with high degree of reliability and efficiency.
}, year = {2012}, journal = {Information \& Security: An International Journal}, volume = {28}, number = {10}, pages = {121-132}, month = {2012}, doi = {http://dx.doi.org/10.11610/isij.2810}, language = {eng}, }