InternationalJournalofSoftwareEngineeringApplications.pdfVIP

International Journal of Software Engineering Applications (IJSEA), Vol.2, No.4, October 2011 Metamorphic computer virus detection by Case- Based Reasoning (CBR) methods 1 Abdellatif Berkat 1 Telecommunication Laboratory, Faculty of Technology, Abou-Bekr Belkaïd University Tlemcen, 13000, Algeria Berk.abdellatif@ Abstract Metamorphic virus employs code obfuscation techniques to mutate itself. It absconds from signature- based detection system by modifying internal structure without compromising original functionality. In this paper, we propose a new method, for detecting metamorphic computer viruses, that is based on the technique of Case-Based Reasoning (CBR). In this method: -Can detect similar viruses with high probability. - The updating of the virus database is done automatically without connecting to the Internet. Whenever a new virus is detected, it will be automatically added to the database used by our application. This presents a major advantage. Keywords Metamorphic computer virus , antivirus , intelligent systems , Case-Based Reasoning (CBR) , detection of viruses , detection technique . 1. Introduction Computer viruses are an omnipresent issue of information technology. A lot of books discuss their practical issues [5] or [21]. But, as far as we know, there are only a few theoretical studies on this topic. This situation is amazing because the term “computer virus” comes from the seminal theoretical works in the mid-1980’s . We do think that theoretical point of view on computer viruses ma