Rcryptect: Real-time detection of cryptographic function in the user-space filesystem

The existing methods of ransomware detection have limitations. To be specific, static analysis is not effective to obfuscated binaries, while dynamic analysis is usually restricted to a certain platform and often takes tens of minutes. In this paper, we propose a block-level monitoring system to det...

Ausführliche Beschreibung

Bibliographische Detailangaben

Veröffentlicht in:	Computers & security 2022-01, Vol.112, p.102512, Article 102512
Hauptverfasser:	Lee, Seungkwang, Jho, Nam-su, Chung, Doyoung, Kang, Yousung, Kim, Myungchul
Format:	Artikel
Sprache:	eng
Schlagworte:	Cryptographic function detection Cryptography Cybersecurity Device security Entropy FUSE Heuristic Ransomware Real time Statistical analysis
Online-Zugang:	Volltext
Tags:	Tag hinzufügen Keine Tags, Fügen Sie den ersten Tag hinzu!