C++ Neural Networks and Fuzzy Logic: Preface

Computer Virus Detector

IBM Corporation has applied neural networks to the problem of detecting and correcting computer viruses.

IBM’s AntiVirus program detects and eradicates new viruses automatically. It works on boot−sector types of

viruses and keys off of the stereotypical behaviors that viruses usually exhibit. The feedforward

backpropagation neural network was used in this application. New viruses discovered are used in the training

set for later versions of the program to make them “smarter.” The system was modeled after knowledge about

the human immune system: IBM uses a decoy program to “attract” a potential virus, rather than have the virus

attack the user’s files. These decoy programs are then immediately tested for infection. If the behavior of the

decoy program seems like the program was infected, then the virus is detected on that program and removed

wherever it’s found.