1.1 Introduction
Malware is an intrusive malicious code that accesses computer system information without permission from the client. The role of malware is to infect computer network securities by obtaining unauthorised access to the network and distributing the malicious codes in the network. Currently, the internet is facing several problems related to malware, which ultimately hampers the security of computer networks. Malware is considered a global threat that has worked its way into all known parts of the worldwide computer industry. According to the Internet Security Threat report (by Symantec) published in 2016, over nine mega breaches were reported (a breach with over 10 million records is considered a mega breach), where total exposed identities by malware jumped 23% to 429 million that year.
As a prelude to other parts of this study, this chapter will discuss the background upon which this study was initiated, the statement of problems that led to this study, the Aim and Objectives of the study. Others are Significance of the study, Scope of work, Research hypothesis and questions, Limitations of the Study and Definition of technical terms.
1.2 Background of Study
In the World Wide Web (WWW), malware is considered one of the most serious threats to system security with complex system issues caused by malware and spam. Networks and systems can be accessed and compromised by various types of malware, such as viruses, worms, Trojans, botnet and rootkits, which compromise systems through coordinated attacks. Malware often uses anti-forensic techniques to avoid detection and investigation. Moreover, the results of investigating such attacks are often ineffective and can create barriers for obtaining clear evidence due to the lack of sufficient tools and the immaturity of forensics methodology.
The malware industry is growing and compromising computer securities across the globe by penetrating internet securities. Malware is not only damaging computer network systems; it is also a business entity for making profits. The developers of malware intrusion systems can potentially earn considerable amounts of money by developing malicious entity codes.
The role of malware developers is to develop malicious codes and transform them into malware programs. Malware developers do not create new suspicious malware each time; rather, they create new variants of existing malware and spread them throughout the internet shadow economy (Schipka, 2007). Variants of existing malware can be easily spread across internet securities.
Malware is intrusive software that conducts unauthorised, malicious activities on a system. It can be easily deployed into any system, causing longer disruption and damage. Malware poses a real, extensive threat, and it has created a buzz in the field of digital forensic science (Kramer & Bradfield, 2008). In the most pertinent situations, malware targets and attacks financial institutions or the banking industry, as well as other systems dealing with monetary assets both online and offline. Cyber criminals can create a script that targets customers and enterprises dealing with these financial institutions, creating a sense of insecurity amongst users (Yin et al., 2007). A comprehensive list of different types of malware would include Trojans, viruses, worms, rootkits, botnets, phishing, spam, spyware, keyloggers and logic bombs.
Traditional countermeasures used for detecting malware include signature-based methods or recognising anomalous behaviour specified by a rule or a function (Florencio & Herley, 2011). However, these traditional methods have flaws and challenges, thus making it difficult to obtain effective and efficient results during an investigation. Given the significant increase in malware attacks and exposure resulting in loss of confidentiality, integrity and availability of data (Florencio & Herley, 2011), the need for a new formalised approach to collect, analyse and mitigate malicious content in systems must be addressed.
Therefore, in Nigeria where the research was carried out, the activities that was conducted is to know the Personal Computer (PC) Malware Protection and Defense.
1.3 Statement of Problems
Investigation revealed that malware is intrusive software that conducts unauthorised, malicious activities on a system. It can be easily deployed into any system, causing longer disruption and damage. Malware poses a real, extensive threat, and it has created a buzz in the field of digital forensic science (Kramer & Bradfield, 2008). In the most pertinent situations, malware targets and attacks financial institutions or the banking industry, as well as other systems dealing with monetary assets both online and offline. Cyber criminals can create a script that targets customers and enterprises dealing with these financial institutions, creating a sense of insecurity amongst users (Yin et al., 2007). A comprehensive list of different types of malware would include Trojans, viruses, worms, rootkits, botnets, phishing, spam, spyware, keyloggers and logic bombs.
1.4 Aim and Objectives of Study
The aim of the study is to scrutinize the Personal Computer (PC) Malware Protection and Defense. In achieving this aim, the following specific objectives were laid out as follows:
- To detect and analyse malware in Personal Computer (PC),
- To address the current challenges faced by computer engineers in protecting and defending a Personal Computer (PC).
- To help forensics experts carry out a quick, investigatory process to detect the behaviour of malware and its related elements.
- To examine the effective framework used in analyzing the behavioural characteristics of the malware family and the mechanics of its operation.
1.5 Research Questions
The study came up with research questions so as to be able to ascertain the above stated objectives. The specific research questions for the study are stated below as follows:
- Has forensics experts assisted in carrying out a quick, investigatory process to detect the behaviour of malware and its related elements?
- Is it possible to develop an effective malware detection system by investigating the behavioural characteristics of existing malware?
- Is it possible to justify both static and dynamic methods in anti-malware technology?
- How is malware detected in a Personal Computer (PC),
- What are current challenges faced by computer engineers in protecting and defending a Personal Computer (PC)?
1.6 Significance of Study
This study will be of immense benefit to computer engineers and other researchers who intend to know more on this study and can also be used by non-researchers to build more on their research work. This study contributes to knowledge and could serve as a guide for other study.
1.7 Scope of Study
The scope of the research is focused on Personal Computer (PC) Malware Protection and Defense.
1.8 Limitations of the Study
During the course of this study, many things militated against its completion, some of which are:
- Time Constraint: The time frame given to accomplish this project was very short due to school academic calendar and it was carried out under pressure which made the researcher not to implement some necessary features.
- Research material: availability of research material is a major setback to the scope of the study.
- Frequent power failure: This made the researcher append more money on fuel to ensure sustainable power.
- Financial Constraint: Insufficient fund tends to impede the efficiency of the researcher in sourcing for the relevant materials, literature or information and in the process of data collection.
1.9 Definition of Terms
Malware: Malware is intrusive software that conducts unauthorised, malicious activities on a system. It can be easily deployed into any system, causing longer disruption and damage.
