Ransomware is a subset of malware that encrypts critical data on the victim’s system, followed by a demand for ransom. These attacks are one of the most pervasive cyber crime threats to organizations throughout the world. Over time, the increasing frequency of ransomware attacks has piqued the interest of academics in their study. Researchers are continually striving to prevent ransomware infections and victimization. Despite expansive research focused on popular ransomware families, less commonly labeled variants remain under explored, becoming flag bearers of a hidden yet critical facet of the threat spectrum. Many prescribed solutions lack scalability and robustness and are not generalized. This paper restricts itself to presenting a systematic survey of ransomware detection mechanisms. This paper focuses on: (1) summarizing current challenges related to ransomware detection and (2) presenting an overview of the current approaches. (3) discussing the important features of classification (4) comparing existing works with their counterparts against different features while exploring their structure (5) tools used for ransomware detection and data acquisition are discussed.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Tom and Jerry Chase: Ransomware Analysis and Detection at a Glance

  • Janosia Banerjee,
  • Adwita Singh,
  • Jahnvi Srivastav,
  • A. K. Mohapatra,
  • Shweta Jindal

摘要

Ransomware is a subset of malware that encrypts critical data on the victim’s system, followed by a demand for ransom. These attacks are one of the most pervasive cyber crime threats to organizations throughout the world. Over time, the increasing frequency of ransomware attacks has piqued the interest of academics in their study. Researchers are continually striving to prevent ransomware infections and victimization. Despite expansive research focused on popular ransomware families, less commonly labeled variants remain under explored, becoming flag bearers of a hidden yet critical facet of the threat spectrum. Many prescribed solutions lack scalability and robustness and are not generalized. This paper restricts itself to presenting a systematic survey of ransomware detection mechanisms. This paper focuses on: (1) summarizing current challenges related to ransomware detection and (2) presenting an overview of the current approaches. (3) discussing the important features of classification (4) comparing existing works with their counterparts against different features while exploring their structure (5) tools used for ransomware detection and data acquisition are discussed.