DEVELOPMENT OF A SYSTEM FOR DETECTING POTENTIAL VIRUSES AND ACTIVE EXPLOITS IN CORPORATE MESSENGERS

Rusakov Aleksej Mixajlovich, Amelyutin Evgenij Vyacheslavovich, Rozin Stanislav Vadimovich, Samogin Artem Sergeevich

The paper describes one of the possible approaches to identifying potential viruses and active exploits in corporate messengers. Timely detection of traces and descriptions of viruses and active exploits in corporate messengers helps to increase the overall level of security. The paper provides a structure and description of the development of a software package to identify potential viruses and exploits in corporate messengers. The software package is capable of working on big data in order to identify attacks that can be implemented in the form of Internet links, polymorphic malware and Trojan ransomware.in the form of Internet links, polymorphic malware and Trojan ransomware.

Keywords:text mining, information security, detection of active exploits, detection of traces and descriptions of viruses