18.4.1. Runtime Test Routine

Figure 5 shows how the proposed multi-tier streaming analytics model runs its runtime test routine to detect a ransomware version in a realistic environment. In Figure 5, a suspicious version downloads itself onto the targeting computer system when the user browses the web. To do so, the suspicious attack uses many toolkits for this purpose, such as Trojans, spoofing links, and downloading soft...