Scholarlink

<p>Ransomware poses a huge danger to cloud Virtual Machines (VM) because cloud infrastructures are scalable and multitenant giving attackers a huge attack surface. It swiftly propagates across the cloud infrastructure encrypting key data and preventing services from causing severe operational and financial losses once a VM is compromised. Traditional detection approaches like signature-based techniques fail to identify new or updated ransomware strains in dynamic cloud settings. A real time ransomware detection system for cloud VMs that combines behavioral biometrics, Homomorphic Encryption (HE) and anomaly detection based on Gaussian Mixture Model (GMM) to improve security and privacy is proposed. HE guarantees the safe processing of encrypted data without the need for decryption while GMM professionally simulates both typical and unusual actions in real time. The detection process improves the&#xa0;feature extraction and selection using advanced methods like Gated Recurrent Unit (GRU), Deep Feature Selection (DFS), and Variational Autoencoder (VAE). It obtained 99.1 percent accuracy and 97.4 percent precision with a remarkably low False Positive Rate (FPR) and False Negative Rate (FNR) of 0.01 and 0.02 respectively when tested on the CICIDS 2018 dataset. This shows that it performs better than current techniques and is suitable for large-scale, real time cloud environments while maintaining data privacy. The result proves that the proposed method is stable and expandable in identifying ransomware attacks in cloud VMs.</p>

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Real time ransomware detection in cloud VMS using behavioral biometrics homomorphic encryption and GMM based anomaly detection

  • 期刊论文

  • 发表日期：

    2025年11月10日

查看全文
  • Haitham A. Mahmoud,
  • Abdelaty Edrees Abdelgawad,
  • Ahmed T. Soliman,
  • Mohammed A. El-Meligy

摘要

Ransomware poses a huge danger to cloud Virtual Machines (VM) because cloud infrastructures are scalable and multitenant giving attackers a huge attack surface. It swiftly propagates across the cloud infrastructure encrypting key data and preventing services from causing severe operational and financial losses once a VM is compromised. Traditional detection approaches like signature-based techniques fail to identify new or updated ransomware strains in dynamic cloud settings. A real time ransomware detection system for cloud VMs that combines behavioral biometrics, Homomorphic Encryption (HE) and anomaly detection based on Gaussian Mixture Model (GMM) to improve security and privacy is proposed. HE guarantees the safe processing of encrypted data without the need for decryption while GMM professionally simulates both typical and unusual actions in real time. The detection process improves the feature extraction and selection using advanced methods like Gated Recurrent Unit (GRU), Deep Feature Selection (DFS), and Variational Autoencoder (VAE). It obtained 99.1 percent accuracy and 97.4 percent precision with a remarkably low False Positive Rate (FPR) and False Negative Rate (FNR) of 0.01 and 0.02 respectively when tested on the CICIDS 2018 dataset. This shows that it performs better than current techniques and is suitable for large-scale, real time cloud environments while maintaining data privacy. The result proves that the proposed method is stable and expandable in identifying ransomware attacks in cloud VMs.