Preventing Ransomware Attacks Through File System Filter Drivers - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2018

Preventing Ransomware Attacks Through File System Filter Drivers

Résumé

Over the last years ransomware attacks have been widely spreading over the Internet, indiscriminately targeting home users as well as corporates and public agencies. Several approaches have been proposed to analyze and detect ransomware intrusions in literature, moving from combined heuristics, behavior analysis, sandbox-based solutions and machine learning techniques to function calls monitoring. Our approach differs from the above by shifting the focus from removing the problem to mitigating damages, to ensure data availability despite malware attacks. The aim is not to detect new ransomware samples, but simply to protect integrity and availability of private data. In other words, we interfere with ransomware usual behavior, intercepting I/O request packets and denying operations on user's valuable data.
Fichier principal
Vignette du fichier
paper-08.pdf (571.12 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01925958 , version 1 (18-11-2018)

Identifiants

  • HAL Id : hal-01925958 , version 1

Citer

Giovanni Bottazzi, Giuseppe F Italiano, Domenico Spera. Preventing Ransomware Attacks Through File System Filter Drivers. Second Italian Conference on Cyber Security, 2018, Milan, Italy. ⟨hal-01925958⟩

Collections

INRIA INRIA2
230 Consultations
896 Téléchargements

Partager

Gmail Facebook X LinkedIn More