A Survey On Windows-Based Ransomware Taxonomy And Detection Mechanisms: Case Closed? - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue ACM Computing Surveys Année : 2022

A Survey On Windows-Based Ransomware Taxonomy And Detection Mechanisms: Case Closed?

Résumé

Ransomware remains an alarming threat in the 21 st century. It has evolved from being a simple scare tactic into a complex malware capable of evasion. Formerly, end-users were targeted via mass infection campaigns. Nevertheless, in recent years, the attackers have focused on targeted attacks since the latter are profitable and can induce severe damage. A vast number of detection mechanisms have been proposed in the literature. We provide a systematic review of ransomware countermeasures starting from its deployment on the victim machine until the ransom payment via cryptocurrency. We define four stages of this malware attack: Delivery, Deployment, Destruction, and Dealing. Then, we assign the corresponding countermeasures for each phase of the attack and cluster them by the techniques used. Finally, we propose a roadmap for researchers to fill the gaps found in the literature in ransomware's battle. CCS Concepts: • Security and privacy → Malware and its mitigation;
Fichier principal
Vignette du fichier
suvey-ransomware.pdf (648.24 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03672901 , version 1 (19-05-2022)

Identifiants

Citer

Routa Moussaileb, Nora Boulahia Cuppens, Jean-Louis Lanet, Hélène Le Bouder. A Survey On Windows-Based Ransomware Taxonomy And Detection Mechanisms: Case Closed?. ACM Computing Surveys, 2022, 54 (6), pp.1-36. ⟨10.1145/3453153⟩. ⟨hal-03672901⟩
153 Consultations
974 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More