Sequential analysis of cryptojacker sings based on the Wald criterion
Nikolay Gaidamakin · 2024
An algorithm is presented for analyzing the computational process on a user’s computer device based on the sings of a cryptojacker, i.e. performing hidden illegal cryptomining. The algorithm is based on a sequential analysis of three sings-parameters of the cryptojacker operation – an increased load of the processor system, constant external network traffic and the call of crypto libraries. The logic of the algorithm is based on the maximin Wald criterion, the decisive statistics of which (the likelihood ratio) is calculated on the basis of empirically generated histograms of the frequencies of the values of the corresponding sings-parameters.