Detecting Ransomware Execution in a Timely Manner. (arXiv:2201.04424v1 [cs.CR])

Web: http://arxiv.org/abs/2201.04424

Ransomware has been an ongoing issue since the early 1990s. In recent times
ransomware has spread from traditional computational resources to
cyber-physical systems and industrial controls. We devised a series of
experiments in which virtual instances are infected with ransomware. We
instrumented the instances and collected resource utilization data across a
variety of metrics (CPU, Memory, Disk Utility). We design a change point
detection and learning method for identifying ransomware execution. Finally we
evaluate and demonstrate its ability to detect …

ransomware