RGV2: A Framework for crypto-ransomware detection using FastText and neural networks
摘要
Crypto-ransomware attacks are an escalating global threat, causing significant financial and reputational damage to businesses and individuals. Traditional detection mechanisms, such as signature-based methods, often fail to detect sophisticated ransomware variants that employ advanced evasion tactics. To address these critical shortcomings, this paper introduces RGV2, a next-generation ransomware detection framework that bridges this gap by integrating static and dynamic analysis through Event Tracing for Windows (ETW) logs. RGV2 uses FastText embeddings to extract semantic representations of encoded I/O patterns and leverages deep learning models, such as Conv1D, to classify ransomware based on file I/O behavior. Experimental evaluations show that RGV2 achieves a detection accuracy of 99.64% while maintaining an exceptionally low false-positive rate. These results highlight RGV2’s potential as a scalable and real-time protection mechanism with significant societal impact by ensuring early detection and mitigation of ransomware attacks in real-world environments.