An Intelligence based Model for the Prevention of Advanced Cyber-attacks

Abstract

The trend and motive of Cyber-attacks have gone beyond traditional damages, challenges to information stealing for political and economic gain. With the recent APT (Advance Persistent Threat), Zero-day malware, and Blended threat, the task of protecting vita infrastructures are increasingly becoming difficult. This paper presents an intelligence based technique that combined the traditional signature based detection with the next generation based detection. The proposed model consists of virtual execution environment, detection, and prevention module. The virtual execution environment is designated to analyze and execute a suspected file contains malware while other module inspect, detect, and prevent malware execution based on the intelligent gathering in the central management system (CMS). The model based on Next Generation Malware Detection of creating threat intelligence for future occurrence prevention. The model takes into consideration the false positive and false negative among other lapses and benefits of the existing detectors