Abstract
Nowadays, with the spread of internet and network-based services, malware has become a major threat to computers and information systems. Actually, different malware share similar behaviours, also they have different syntactic structures due to the incorporation of obfuscation techniques such as polymorphism, Oligomorphic and meta-morphism. The different structure of same behavioral malware poses a serious problem to signature-based detection techniques. In this paper we propose an automated prevention system based on malware behaviours. Our system has the ability to collect suspicious software from client computers, then to automatically analyses the behaviour of detected malware. Then agent then sends an alarm to all network clients. The results from an implementation of the proposed system show that our approach is effective in analysing detected malware in automated security systems.