On deriving unknown vulnerabilities from zero-day polymorphic and metamorphic worm exploits