Geometry-based Detection of Flash Worms