Malicious attacker analysis