An Immunization Scheme for Ransomware |
| |
Authors: | Jingping Song Qingyu Meng Chenke Luo Nitin Naik Jian Xu |
| |
Affiliation: | 1.Software College, Northeastern University, Shenyang, 110169, China.
2 School of Cyber Science and Engineering, Wuhan University, Wuhan, 430072, China.
3 School of Computing, University of Portsmouth, Portsmouth, PO1 2DT, UK. |
| |
Abstract: | In recent years, as the popularity of anonymous currencies such as Bitcoin has
made the tracking of ransomware attackers more difficult, the amount of ransomware
attacks against personal computers and enterprise production servers is increasing
rapidly. The ransomware has a wide range of influence and spreads all over the world. It
is affecting many industries including internet, education, medical care, traditional
industry, etc. This paper uses the idea of virus immunity to design an immunization
solution for ransomware viruses to solve the problems of traditional ransomware defense
methods (such as anti-virus software, firewalls, etc.), which cannot meet the requirements
of rapid detection and immediate prevention of new outbreaks attacks. Our scheme
includes two parts: server and client. The server provides an immune configuration file
and configuration file management functions, including a configuration file module, a
cryptography algorithm module, and a display module. The client obtains the
immunization configuration file from server in real time, and performs the corresponding
operations according to the configuration file to make the computer have an immune
function for a specific ransomware, including an update module, a configuration file
module, a cryptography algorithm module, a control module, and a log module. This
scheme controls mutexes, services, files and registries respectively, to destroy the
triggering conditions of the virus and finally achieve the purpose of immunizing a
computer from a specific ransomware. |
| |
Keywords: | Malware ransomware malware immunization |
|
| 点击此处可从《》浏览原始摘要信息 |
|
点击此处可从《》下载全文 |
|