Host malware: Worm

Host malware: Worm

1. Symptoms

   • Slow performance
   • Freezing/Crashing
   • Erratic Behaviour
     • Programs opening & running automatcally
     • Irregular web browser performance
     • Missing/Modified Files
     • Appearance of strange/unintended files/icons
     • Emails sent to contacts without knowledge
   • Firewall Warnings
   • OS Errors

2. Detection

   • Signature Detection
     • Detect Known Attacks
   • Anomaly Detection
     • Detects unusual patterns
       • Network Traffic
         • Byte Pattern Monitoring
           • Quick detection & Containment
         • Monitor by IP Address Scanning
           • Detecting Target Discovery
         • Deployment of a Guardian Node
       • Running Program
         • Monitoring untrusted processes
         • Monitoring Trusted Processes

3. Containment

   • Quarantine & Monitor
   • Setting Minimal Permissions
   • Installing latest update

4. Eradication

5. Recovery