Iran has unveiled its second domestically developed antivirus software, dubbed Ayyza, using artificial intelligence and machine learning to detect both known and previously unidentified cyber threats.
Innovative Features of Ayyza
The antivirus, crafted by an Iranian knowledge-based company, aims to safeguard users against a variety of cyber threats, including malware, viruses, Trojans, ransomware, and advanced persistent threats (APTs). Mohammad Shafieinia, the company’s director, emphasized that the development of Ayyza was centered on integrating multiple security technologies to enhance the detection of intricate and multi-stage attacks.
“We endeavored to leverage cutting-edge technologies and artificial intelligence to identify complex threats while creating a cohesive ecosystem of XDR, EDR, and antivirus technologies,” he stated in an interview with ISNA.
Shafieinia highlighted that the primary goal was to elevate the detection rate of the system, thereby offering users a superior level of protection against sophisticated cyber threats. The detection engine of Ayyza has been entirely developed in-house, utilizing technologies that operate at the Windows kernel level.
“Our antivirus engine is fully homegrown and employs Windows kernel-level technologies to ensure enhanced detection accuracy, speed, and agility,” he explained.
Resource Efficiency and Update Mechanisms
In an era where the cost of computing resources is on the rise, the company has designed Ayyza to minimize hardware resource consumption, particularly CPU and RAM. Shafieinia remarked on the significance of this optimization, stating, “Security software must be efficient in its resource usage to avoid hampering the performance of the systems users rely on.”
Another noteworthy feature of Ayyza is its capability to receive updates without necessitating a direct internet connection. Updates can be delivered offline or via Iran’s National Information Network, providing flexibility in maintaining the software’s efficacy.
Shafieinia also underscored the product’s machine-learning capabilities, which empower it to recognize emerging threats. “Our machine-learning system can detect various types of attacks, even those that lack a specific signature,” he noted, adding that the system is adept at identifying previously unknown malware and potentially recognizing “zero-day” vulnerabilities.
Complementary Security Tools
Despite the robust features of Ayyza, Shafieinia acknowledged that no single security solution can comprehensively address all cybersecurity threats. To this end, the company has developed additional tools that complement the antivirus, including systems for privileged access management (PAM) and data leakage prevention.
“For detecting intelligent agents and AI-driven attacks, we have another product designed to identify such threats and relay its findings to the antivirus,” he stated.
He further emphasized the necessity for improved integration among cybersecurity products utilized by organizations, pointing out that many systems currently function in isolation. “We must advance towards integration, coordination, and, in technical terms, orchestration among the various security solutions employed by organizations,” he asserted.
With approximately 15 years of experience in the cybersecurity domain, the company reports that its products are already operational across a multitude of Iranian infrastructures, including banking, financial, and governmental systems. Its more established offerings, such as a data-leak prevention system and PAM solution, have been effectively deployed for over a decade in more than 70 critical and sensitive infrastructures throughout Iran.
