Skip to main content

Parallelism in Signature Based Virus Scanning with CUDA

  • Conference paper
  • First Online:
Future Access Enablers for Ubiquitous and Intelligent Infrastructures (FABULOUS 2019)

Abstract

Information security is playing big role in the computer technologies. Its job is to detect unauthorized violation of the information integrity, secure it and also recover it, if the integrity was violated. One of the things that can alter an information are computer viruses. One of the task of the information security is also to detect these malicious applications and prevent their goal. This can be achieved in various techniques and one of them is signature based virus scanning. This technique uses a virus database (virus signatures) to detect if a file or application is infected with a specific virus. In this paper we are going to see in more details how is this implemented, which algorithm are mostly used and also try to improve its performance by parallelizing it on GPU by using CUDA. We are also going to see how CUDA utilizes large number of threads to solve a specific problem and use it to implement a parallel signature based virus scanner. Later we are going to see the performance benchmarks of the conducted experiments and discuss them and give a final conclusions for the usage of a GPU in signature based virus scanning.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 39.99
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 54.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. Aho, A.V., Corasick, M.J.: Efficient string matching: an aid to bibliographic search. Commun. ACM 18, 333–340 (1975)

    Article  MathSciNet  Google Scholar 

  2. Vicente Dias, A.N.: Detecting Computer Viruses using GPUs

    Google Scholar 

  3. New Virus Scanning Solution Uses NVIDIA CUDA. https://blogs.nvidia.com/blog/2009/12/15/new-virus-scanning-solution-uses-nvidia-cuda/

  4. Chapter 35: Fast Virus Signature Matching on the GPU. https://developer.nvidia.com/gpugems/GPUGems3/gpugems3_ch35.html

  5. Intel offloads virus scanning to the GPU for better battery life and performance. https://www.pcworld.com/article/3268985/security/microsoft-intel-virus-scanning-gpu.html

  6. GPGPU. https://en.wikipedia.org/wiki/General-purpose_computing_on_graphics_processing_units

  7. NVIDIA Inc.: CUDA. https://developer.nvidia.com/cuda-zone

  8. NFA (Nondeterministic finite automata). https://en.wikipedia.org/wiki/Nondeterministic_finite_automaton

  9. ClamAV. https://www.clamav.net/about

  10. Gao, D., Yin, G., Dong, Y., Kou, L.: A Research on the Heuristic Signature Virus Detection Based on the PE Structure

    Google Scholar 

  11. Alberto, C., Gonzlez, N.: Polymorphic Virus Signature Recognition via Hybrid Genetic Algorithm. https://github.com/carlosnasillo/Hybrid-Genetic-Algorithm/blob/master/README.markdown

  12. Pungila, C., Negru, V.: A highly-efficient memory-compression approach for GPU-accelerated virus signature matching. In: Gollmann, D., Freiling, F.C. (eds.) ISC 2012. LNCS, vol. 7483, pp. 354–369. Springer, Heidelberg (2012). https://doi.org/10.1007/978-3-642-33383-5_22. https://link.springer.com/chapter/10.1007/978-3-642-33383-5_22

    Google Scholar 

  13. Big Data. https://en.wikipedia.org/wiki/Big_data

  14. Panigrahi, C.R., Tiwari, M., Pati, B., Prasath, R.: Malware detection in big data using fast pattern matching: a hadoop based comparison on GPU. In: Prasath, R., O’Reilly, P., Kathirvalavakumar, T. (eds.) MIKE 2014. LNCS (LNAI), vol. 8891, pp. 407–416. Springer, Cham (2014). https://doi.org/10.1007/978-3-319-13817-6_39. https://link.springer.com/chapter/10.1007/978-3-319-13817-6_39

    Chapter  Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Andrej Dimitrioski .

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2019 ICST Institute for Computer Sciences, Social Informatics and Telecommunications Engineering

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Dimitrioski, A., Gusev, M., Zdraveski, V. (2019). Parallelism in Signature Based Virus Scanning with CUDA. In: Poulkov, V. (eds) Future Access Enablers for Ubiquitous and Intelligent Infrastructures. FABULOUS 2019. Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering, vol 283. Springer, Cham. https://doi.org/10.1007/978-3-030-23976-3_36

Download citation

  • DOI: https://doi.org/10.1007/978-3-030-23976-3_36

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-030-23975-6

  • Online ISBN: 978-3-030-23976-3

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics