Anti-Virus Neural Network Should Catch More Malware

A small adjustment to malware can cause the virus threat is no longer detected, but an Israeli company claims to have found the solution: artificial neural networks. The neural networks to analyze the properties of millions of malware instances and clean files, and so learned to recognize the characteristics of malware.

The approach should ensure that the virus scanner of the company is better able to detect modified versions of malware that is missed by traditional anti-virus software. Deep learning, such as the approach is called, consists of training of a large network that consists of simulated neurons and synapses to get as complex patterns from the data provided. The intention is that the network can recognize the end of itself completely new ones.

The Israeli Deep Instinct says to train their own neural network with a large number of files and settings. A time- and computing-intensive process, which runs on a cluster of GPUs. According to founder and CTO Eli David can own the solution 20% more malware detection than existing solutions. So it can tell whether a file appears sufficient to existing malware makes it suspicious, says MIT Technology Review.

A small adjustment or particular string in the code is therefore no longer enough to deceive the virus. According to Professor George Cybenko the British Dartmouth College is the idea of ​​neural networks to find malware is not new, but gives the appearance of deep learning possible for renewed interest. He argues that the promised results must first be tested. In addition, malware authors are very persistent. "If there is a breakthrough, they will do research and come with a new approach," he warns.

Microsoft Checks On Millions Of Computers Ransomware

Since yesterday evening, Microsoft has millions of Windows computers on the presence of an active ransomware family-controlled. It involves the Teerac-ransomware, which has been active since early 2014. In recent months, hundreds of thousands of computers with ransomware in touch.

These are essentially computers in Australia, Germany and Turkey. Teerac spreads via email attachments. When a user opens the attachment kinds of files are encrypted and there should be a fee of $ 500 in bitcoin paid to recover the files.According to Microsoft appear every day new instances of ransomware to avoid being detected by anti-virus software.

Due to the increasing activity of Teerac decided the Microsoft Malicious Software Removal Tool (MSRT) update in Windows so that the program can recognize and remove ransomware. The MSRT is a removal tool which is updated every month with new virus definitions and then scan the computer. In the case of an infection, the malware found is then removed. According to Microsoft, prevention is better than cure. Users also are advised to make backups, to keep software up to date, use a pop-up blocker and not to open attachments from strangers.