Using Null Data Processing to recognize variant computer viruses for Rule-based Anti-virus systems

Abstract

Null data processing Is commonly used for Knowledge Discovering In Database systems and Machine Learning systems. In fact, null data must be eliminated from major databases because It often causes bad effects on the quality of data mining processing. In this paper, we Introduce a new point of view: null data processing can also be used In a recognition system to Identify strange objects. Our work Involves three operations - 'toNull', 'deNull' and 'fixNull' along with Data Fusion technique and a rule-based production Inference algorithm. This process has been applied to our designed software called Machine Learning Anti-virus System (MAY) In security scope. The results from the experiment showed that the MAV-operated algorithm has the same performance as other anti-virus software whose algorithms require bigger viruses signature database. © 2006 IEEE.