Toward A Network-Assisted Approach for Effective Ransomware Detection

Xia, Tianrou and Sun, Yuanyi and Zhu, Sencun and Rasheed, Zeeshan and Shafique, Khurram (2021) Toward A Network-Assisted Approach for Effective Ransomware Detection. EAI Endorsed Transactions on Security and Safety, 7 (24). e3. ISSN 2032-9393

[thumbnail of eai.28-1-2021.168506.pdf]
Available under License Creative Commons Attribution No Derivatives.

Download (2MB) | Preview


Ransomware is one kind of malware using cryptography to prevent victims from normal use of their computers. As a result, victims lose the access to their files and desktops unless they pay the ransom to the attackers. By the end of 2019, ransomware attack had caused more than 10 billion dollars of financial loss to enterprises and individuals. In this work, we propose a Network-Assisted Approach (NAA), which contains local detection and network-level detection, to help user determine whether a machine has been infected by ransomware. To evaluate its performance, we built 100 containers in Docker to simulate network scenarios. A hybrid ransomware sample which is close to real-world ransomware is deployed on stimulative infected machines. The experiment results show that our network-level detection mechanisms are separately applicable to WAN and LAN scenarios for ransomware detection.

Item Type: Article
Uncontrolled Keywords: ransomware detection, ant colony optimization algorithm, network security
Subjects: H Social Sciences > H Social Sciences (General)
Q Science > QA Mathematics > QA75 Electronic computers. Computer science
QA75 Electronic computers. Computer science
Depositing User: EAI Editor IV
Date Deposited: 26 Mar 2021 14:03
Last Modified: 26 Mar 2021 14:03

Actions (login required)

View Item
View Item