An Empirical Study of Ransomware Vulnerabilities Descriptions - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2024

An Empirical Study of Ransomware Vulnerabilities Descriptions

Résumé

Cyber threat awareness requires the building of an accurate knowledge and analysis of the vulnerabilities used by the attackers and their respective attack toolkits. Ransomware are today one of the most significant threats faced by information systems and their number continues to grow. They are a type of malware targeting the information system by locking its equipment and users data and claiming a ransom for its release. They have been becoming more and more sophisticated and mainly relying on software vulnerabilities to access and lock the system data. In this paper we have carried out an empirical analysis of the Common Vulnerabilities Enumeration (CVE) exploited by known ransomware using a semantic annotation technique in order to create the condition from which to start to build a knowledge base of ransomware behaving processes. The main focus of this paper is towards the way vulnerabilities are commonly exploited by ransomware, their sharing ratio and the definition of their c ommon causes and impacts. We have built a database, by scrapping multiple publicly available security reports, which associates each known ransomware to its used vulnerability contained in the CVE. We have applied a semantic annotation methodology which encompasses a semantic analysis of the CVE dataset through a pattern recognition process. This latter has enabled the extraction for each CVE of its key features, i.e., the cause, the performed exploit action and effect, as well as its impact. In the resulting collected and extracted knowledge we show a twofold analysis, statistical and semantic, of the CVE descriptions and their extracted features.
Fichier principal
Vignette du fichier
ICISSP_2024_89_CR.pdf (581.84 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04602391 , version 1 (05-06-2024)

Licence

Identifiants

Citer

Claudia Lanza, Abdelkader Lahmadi, Fabian Osmond. An Empirical Study of Ransomware Vulnerabilities Descriptions. 10th International Conference on Information Systems Security and Privacy, Feb 2024, Rome, France. pp.146-153, ⟨10.5220/0012378700003648⟩. ⟨hal-04602391⟩
34 Consultations
11 Téléchargements

Altmetric

Partager

Gmail Mastodon Facebook X LinkedIn More