STAKCERT worm relational model for worm detection

• Main Authors: M.M., Saudi, A.J., Cullen, M.E., Woodward
• Format: Conference Paper
• Language: en_US
• Published: 2015
• Subjects: Dynamic analysis; Relational model; Static analysis and statistical analysis
• Online Access: http://ddms.usim.edu.my/handle/123456789/9242
• Institution: Universiti Sains Islam Malaysia

In this paper, a new STAKCERT worm relational model is being developed based on the evaluation of the STAKCERT worm classification using the dynamic, static and statistical analysis. A case study was conducted to evaluate the effectiveness of this STAKCERT relational model. The case study result analysis showed that the 5 main features in the relational model play an important role in identifying the vulnerability exploited, the damage caused, the expected rate of worm propagation, the chronological flows and the detection avoidance techniques used by the worms. As such, perhaps this new relational model produced can be used as the basis for organizations and end users in detecting worm incidents.