keweon Info - false/positive
Why there are false/positiv?
Actually I'm using various sources to feed the Database. It also happens that some sites offer PDF downloads. This kind of documents has sometimes special control character inside which will cause that this document is classified as Virus.
This fact and a few other reasons are responsible why sites will be blacklisted which are finally false/positive.
Is it possible to keep them clean?
It is. If I would keep them clean then this will have impact to the DNS Server usage and they will run at a 200% limit. On the other hand I'm really interested to collect all this false/positive things because they are very important for me within the future.
Whats the plan for the future?
I want to have a filter system which will protect systems. Therefore I have developed some kind of AI technology which will collect and analyze the entire Internet. Of cause, at the moment everything is very, very limited but it's working.
I would like to copy the entire Internet IPs, Domains and hosts into a Database. Then there is running an algorithm which will classify various additional attributes and with a comparison of some kind of whitelist database I will push the result into a blacklist database.
No worry, it's more complicated then this explanation. Actually I have also a very, very, very limited budget to access various sources but it's working. I have also hard learned within the last 3 yrs there is a huge difference between a home made solution and a global working solution but finally its possible and it's working.
What's the goal?
My goal is to get a safer and secure Internet at the end. Let me give an example. If someone release a Ransomeware then it currently takes 2 to 4 weeks until the big Anti-Virus player have them on the Blacklist. It will take additional 3 to 5 days until the pattern release and then it will take another 1 to 3 days until the user will have this update.
I have tested this so many times with keweon and although I'm very limited I'm technical able to reduce this detection time down to hours. Actually I'm talking about to 5 to 8 hours and my final goal is to reduce this down to less then 30 minutes.
Is this really possible?
It is possible and this kind of technology has a famous name. It's commonly known as "BigData Analytics".
Exactly this is the reason why it's so hard to find an Investor. I just want to have the entire Internet within the Database. Within all my meetings they want also to have user Data collection but this is a definitely NoGo for me. Never ever.
Now I hope you understand why this false/positiv things are very important for me because this will help to optimize the filter algorithm. I guess all this will now also explain why I have had so many meetings without a positiv result. I'm not kidding you but when I would agree to user data collection then even a 30 million funding would be not a problem.
I have invented a privacy protection system and I show every investor a raised middle finger who even thinks about to cheat users just for money. If it will take additional 5 yrs to get a real system then I'm fine with this. As long as I have control and responsibility about keweon this will never happens and I also don't think about to sell this to someone as long as I stay alive.
May be its too much Robin Hood syndrome and may be that this will never grow. But hey, it's a passion, it's an awesome idea, it's already working and I still believe at the bright side of the force.