Ransomware Steals Your Phone. Formal Methods Rescue It - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2016

Ransomware Steals Your Phone. Formal Methods Rescue It

Francesco Mercaldo
  • Function : Author
  • PersonId : 998092
Vittoria Nardone
  • Function : Author
  • PersonId : 998093
Antonella Santone
  • Function : Author
  • PersonId : 834674
Corrado Aaron Visaggio
  • Function : Author
  • PersonId : 998094


Ransomware is a recent type of malware which makes inaccessible the files or the device of the victim. The only way to unlock the infected device or to have the keys for decrypting the files is to pay a ransom to the attacker. Commercial solutions for removing ransomware and restoring the infected devices and files are ineffective, since this malware uses a very robust form of asymmetric cryptography and erases shadow copies and recovery points of the operating system. Literature does not count many solutions for effectively detecting and blocking ransomware and, at the best knowledge of the authors, formal methods were never applied to identify ransomware. In this paper we propose a methodology based on formal methods that is able to detect the ransomware and to identify in the malware’s code the instructions that implement the characteristic instructions of the ransomware. The results of the experimentation are strongly encouraging and suggest that the proposed methodology could be the right way to follow for developing commercial solutions that could successful intercept the ransomware and blocking the infections it provokes.
Fichier principal
Vignette du fichier
426757_1_En_14_Chapter.pdf (224.98 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-01432919 , version 1 (12-01-2017)





Francesco Mercaldo, Vittoria Nardone, Antonella Santone, Corrado Aaron Visaggio. Ransomware Steals Your Phone. Formal Methods Rescue It. 36th International Conference on Formal Techniques for Distributed Objects, Components, and Systems (FORTE), Jun 2016, Heraklion, Greece. pp.212-221, ⟨10.1007/978-3-319-39570-8_14⟩. ⟨hal-01432919⟩
108 View
499 Download



Gmail Facebook Twitter LinkedIn More