New Iranian Antivirus Uses AI to Detect Unknown Malware
TEHRAN — Iran has unveiled its second domestically developed antivirus software, Ayyza, which uses artificial intelligence and machine learning to detect known and previously unidentified cyber threats, its developer said.
Developed by an Iranian knowledge-based company, Ayyza combines XDR, EDR and antivirus technologies in a single security ecosystem and is designed to
protect against malware, viruses, Trojans, ransomware and advanced persistent threats (APTs).
Muhammad Shafieinia, the company’s director, said developers focused on newer security technologies and artificial intelligence to improve the detection of complex, multi-stage attacks.
“We tried to use more up-to-date technologies and artificial intelligence to detect complex and multi-stage attacks, while creating a combined ecosystem of XDR, EDR and antivirus technologies,” Shafieinia was quoted as saying by ISNA.
He said Ayyza’s detection engine was developed entirely by the company and uses Windows kernel-level technologies to improve detection accuracy, speed and agility.
The software is also designed to minimize CPU and RAM consumption, an increasingly important consideration as computing resources become more costly, he said.
Ayyza can receive updates without relying directly on the internet, with updates delivered offline or through Iran’s National Information Network, according to Shafieinia.
Its machine-learning capabilities allow it to identify emerging threats beyond those covered by specific signatures, potentially including previously unknown malware and so-called zero-day attacks.
Shafieinia cautioned that no single security product can address every cybersecurity threat. The company has therefore developed additional tools for privileged access management (PAM), data-leak prevention and detecting attacks involving artificial intelligence, with feedback transferred to the antivirus.
He also called for greater integration among cybersecurity products used by organizations, saying many currently operate in isolation.
The company says it has about 15 years of cybersecurity experience, with its products deployed across banking, financial and government infrastructures. Its data-leak prevention and PAM products have operated for more than a decade across more than 70 critical, sensitive and important infrastructures in Iran, it said.
Muhammad Shafieinia, the company’s director, said developers focused on newer security technologies and artificial intelligence to improve the detection of complex, multi-stage attacks.
“We tried to use more up-to-date technologies and artificial intelligence to detect complex and multi-stage attacks, while creating a combined ecosystem of XDR, EDR and antivirus technologies,” Shafieinia was quoted as saying by ISNA.
He said Ayyza’s detection engine was developed entirely by the company and uses Windows kernel-level technologies to improve detection accuracy, speed and agility.
The software is also designed to minimize CPU and RAM consumption, an increasingly important consideration as computing resources become more costly, he said.
Ayyza can receive updates without relying directly on the internet, with updates delivered offline or through Iran’s National Information Network, according to Shafieinia.
Its machine-learning capabilities allow it to identify emerging threats beyond those covered by specific signatures, potentially including previously unknown malware and so-called zero-day attacks.
Shafieinia cautioned that no single security product can address every cybersecurity threat. The company has therefore developed additional tools for privileged access management (PAM), data-leak prevention and detecting attacks involving artificial intelligence, with feedback transferred to the antivirus.
He also called for greater integration among cybersecurity products used by organizations, saying many currently operate in isolation.
The company says it has about 15 years of cybersecurity experience, with its products deployed across banking, financial and government infrastructures. Its data-leak prevention and PAM products have operated for more than a decade across more than 70 critical, sensitive and important infrastructures in Iran, it said.