Unlike a normal virus scanner on consumer PCs that compares a catalog of known viruses to something that has infected the computer, A3 can detect new, unknown viruses or malware automatically by sensing that something is occurring in the computer’s operation that is not correct. It then can stop the virus, approximate a repair for the damaged software code, and then learn to never let that bug enter the machine again.
via Self-repairing software tackles malware — ScienceDaily.
The A3 software is open source, meaning it is free for anyone to use, but Eide believes many of the A3 technologies could be incorporated into commercial products
Download papers from the source: A3 : Flux Research Group
The A3 project applies virtualization, record-and-replay, introspection, repair, and other techniques to develop a customizable container for “advanced adaptive applications.” The A3 container provides its protected application with both innate and adaptive defenses against security threats.
Available Software
-
Stackdb — a VMI-enabled debugging library for multi-level systems (read the paper; browse the source code; git clone the source repository)
-
Weir — a streaming language for systems analysis (read the paper; browse the source code; git clone the source repository)
-
XenTT — a “time-traveling” hypervisor (docs and source code)