malicious software identification and engineering