Using Entropy Metrics to Detect Data Integrity Attacks in Real Time
摘要
Abstract
Existing methods for detecting attacks on data integrity in file systems are studied. A detection method based on the use of several entropy metrics is proposed. The effectiveness of the proposed method is evaluated using the example of detecting existing ransomware programs.