Madihah Mohd Saudi ,Madihah Mohd SaudiSazali Sukardi,Sazali SukardiNoor Azwa Azreen Abd Aziz,Noor Azwa Azreen Abd AzizAzuan AhmadMuhammad ‘Afif Husainiamer2024-05-282024-05-28201918/2/20202249-89582248-1110.35940/ijeat.A2711.109119chrome-extension://efaidnbmnnnibpcajpcglclefindmkaj/viewer.html?pdfurl=https%3A%2F%2Fwww.ijeat.org%2Fwp-content%2Fuploads%2Fpapers%2Fv9i1%2FA2711109119.pdf&clen=500797&chunk=truehttps://oarep.usim.edu.my/handle/123456789/5067International Journal of Engineering and Advanced Technology (IJEAT) ISSN: 2249 – 8958, Volume-9, Issue-1, October 2019Nowadays, the sectors most commonly targeted by malwares across the world are manufacturing, oil and gas, and education. Malwares such as BlackEnergy2 and Triton have the ability to cause severe, life-threatening damages to an organization and critical infrastructure systems such as oil and gas. Security researchers and practitioners are looking for efficient solutions to mitigate such malware attacks. Therefore, this paper presents a malware cyber physical system (CPS) classification to detect attacks. This classification is inspired by phylogenetics, borrowed from the biological area in terms of evolutionary relationships among biological organisms. As for the cyber security perspective, it discovers the evolution ancestry of malware genes. This malware classification approach includes malware behavior, mode of attack and connected assets in the network. It can detect numerous forms of malware attacks based on correlation. The research is beneficial for CPS developers, suppliers and contractors, government agencies which regulate and govern utility operations, and the National Cyber Security Azuan Ahmad, Fig. 1 Malwares Attack to CPS from 2003 until 2017 Center (NCSC) which is responsible for protecting CPS. Keywords: Cyber Physical System (CPS); Malware Attacks; Malware Classification; PhylogeneticenCyber Physical System (CPS);Malware Attacks;Malware Classification;PhylogeneticArticle3666367091