These labels were automatically added by AI and may be inaccurate. For details, see About Literature Database.
Abstract
Ransomware uses encryption methods to make data inaccessible to legitimate
users. To date a wide range of ransomware families have been developed and
deployed, causing immense damage to governments, corporations, and private
users. As these cyberthreats multiply, researchers have proposed a range of
ransomware detection and classification schemes. Most of these methods use
advanced machine learning techniques to process and analyze real-world
ransomware binaries and action sequences. Hence this paper presents a survey of
this critical space and classifies existing solutions into several categories,
i.e., including network-based, host-based, forensic characterization, and
authorship attribution. Key facilities and tools for ransomware analysis are
also presented along with open challenges.
External Datasets
220 samples of ransomware strains
148,223 malware samples
504 samples from 12 ransomware families
117 ransomware samples from VirusTotal
References
Cisco Systems
Ransomware defense validated design guide
NA
Published: 2016
Safety Detectives
Ransomware facts, trends & statistics for 2022
NA
Published: 2022
Sustainability
Ransomware detection, avoidance, and mitigation scheme: A review and future directions
A. Kapoor
Published: 2021
Bloomberg Government
Senate bill to mandate cyberattack, ransomware payment reporting
NA
Published: 2021
IEEE Access
A survey on detection techniques for cryptographic ransomware
E. Berrueta, D. Morato, E. Magana, M. Izal
Published: 2019
ACM Computing Surveys
A survey on windows-based ransomware taxonomy and detection mechanisms
R. Moussaileb, N. Cuppens, J.-L. Lanet, Bouder
Published: 2022
IEEE access
A multi-classifier network-based crypto ransomware detection system: A case study of locky ransomware
Almashhadani, A. O., Kaiiali, M., Sezer, S., O’Kane, P.
Published: 2019
Dept. of Mathematics, TU Eindhoven
Network based ransomware detection on the samba protocol
D. Mulders
Published: 2017
Journal of Network and Computer Applications
Ransomware early detection by the analysis of file sharing traffic
D. Morato, E. Berrueta, E. Magana, M. Izal
Published: 2018
SDN-NFV 2018
Machine learning-based detection of ransomware using sdn
G. Cusack, O. Michel, E. Keller
Published: 2018
ICCSE 2018
R-killer: An email based ransomware protection tool
B. Lokuketagoda, M. Weerakoon, U. Kuruppu, A. Senarathne, K. Abeywardena
Published: 2018
Future Generation Computer Systems
Drthis: Deep ransomware threat hunting and intelligence system at the fog layer
S. Homayoun, A. Dehghantanha, M. Ahmadzadeh, S. Hashemi
Published: 2019
International Journal of Network Security
Detection and analysis cerber ransomware based on network forensics behavior
K. Ade, R. Imam
Published: 2018
IEEE Access
Detecting android locker-ransomware on chinese social networks
D. Su, J. Liu, X. Wang, W. Wang, P. O’Kane
Published: 2019
2018 20th International conference on advanced communication technology (ICACT)
The dynamic analysis of wannacry ransomware
Da-Yu Kao, Shou-Ching Hsiao
Published: 2018
Information Systems Frontiers
Deepran: Attention-based bilstm and crf for ransomware early detection and classification
K. C. Roy, Q. Chen
Published: 2021
Computers in Electrical Eng.
Software-defined networking-based crypto ransomware detection using http traffic characteristics