|
An automated approach to analysis and classification of Crypto-ransomwares’ family
|
Seyed Ata S. jafari1   , Mohammadhadi Alaeiyan *1 , Aeed Parsa1 |
| 1- Iran University of Science and Technology |
|
|
Abstract: (3852 Views) |
There is no doubt that malicious programs are one of the permanent threats to computer systems. Malicious programs distract the normal process of computer systems to apply their roguish purposes. Meanwhile, there is also a type of malware known as the ransomware that limits victims to access their computer system either by encrypting the victim's files or by locking the system. Despite other malicious families, ransomware families explicitly warn victims against its existence on the computer system. Although ransomwares are serious problems with computers, they can be detected with restricted footprints on victims’ computers. In this research, we provide a ransomware monitoring system which requires special environments to extract the malware filesystem's activities. A set of features based on filesystem's activities is extracted to classify ransomware families with an accuracy 98% by applying machine learning technique. |
|
| Keywords: Malware, Ransomware, Cryptoransomware, LockyRansomware, Ransomware Classification |
|
|
Full-Text [PDF 13597 kb]
(634 Downloads)
|
Type of Study: Research Article |
Subject:
Special
Received: 2018/12/28 | Accepted: 2020/11/15 | Published: 2020/11/23
|
|
|
|
|
|
|
|
