Preventing Ransomware Attacks Through File System Filter Drivers - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2018

Preventing Ransomware Attacks Through File System Filter Drivers

Abstract

Over the last years ransomware attacks have been widely spreading over the Internet, indiscriminately targeting home users as well as corporates and public agencies. Several approaches have been proposed to analyze and detect ransomware intrusions in literature, moving from combined heuristics, behavior analysis, sandbox-based solutions and machine learning techniques to function calls monitoring. Our approach differs from the above by shifting the focus from removing the problem to mitigating damages, to ensure data availability despite malware attacks. The aim is not to detect new ransomware samples, but simply to protect integrity and availability of private data. In other words, we interfere with ransomware usual behavior, intercepting I/O request packets and denying operations on user's valuable data.
Fichier principal
Vignette du fichier
paper-08.pdf (571.12 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-01925958 , version 1 (18-11-2018)

Identifiers

  • HAL Id : hal-01925958 , version 1

Cite

Giovanni Bottazzi, Giuseppe F Italiano, Domenico Spera. Preventing Ransomware Attacks Through File System Filter Drivers. Second Italian Conference on Cyber Security, 2018, Milan, Italy. ⟨hal-01925958⟩

Collections

INRIA INRIA2
217 View
831 Download

Share

Gmail Facebook X LinkedIn More