Minerva: A File-Based Ransomware Detector. (arXiv:2301.11050v1 [cs.CR])

Ransomware is a rapidly evolving type of malware designed to encrypt user
files on a device, making them inaccessible in order to exact a ransom.
Ransomware attacks resulted in billions of dollars in damages in recent years
and are expected to cause hundreds of billions more in the next decade. With
current state-of-the-art process-based detectors being heavily susceptible to
evasion attacks, no comprehensive solution to this problem is available today.
This paper presents Minerva, a new approach to ransomware detection. …

art attacks current detector device encrypt evasion file files making malware minerva order problem process ransom ransomware ransomware attacks solution state