Developing Worm Trace Pattern For Forensic Investigation

Robiah , Yusof and Siti Rahayu , Selamat and Mohd Zaki, Mas'ud and Shahrin , Sahib (2011) Developing Worm Trace Pattern For Forensic Investigation. Project Report. UTeM, Melaka, Malaysia. (Submitted)

PDF (Full Text) Developing__Worm_Trace_Pattern_For_Forensic_Investigation_TK7882.P3.D48_2011_DAH_EDIT.pdf - Submitted Version Restricted to Registered users only Download (41MB)

Abstract

The number of malware variants is growing tremendously and the study of malware attacks on the Internet is still a demanding research domain. In this research, various logs from different OSI layer are explore to identify the traces leave on the attacker and victim logs, and the attack worm trace pattern are establish in order to reveal true attacker or victim. For the purpose of this research, it will only concentrate on cybercrime that caused by malware network intrusion and used the traditional worm. This research creates the concept of trace pattern by fusing the attacker and victim perspective. Therefore, the objective of this research is to propose on attacker, victim and multi-step (attacker/victim) trace patterns by combining both perspectives. These three proposed worm trace patterns can be extended into research areas in alert correlation and computer forensic investigation.

Actions (login required)

View Item