文章基本信息

标题：The Effective Ransomware Prevention Technique Using Process Monitoring on Android Platform
本地全文：下载
作者：Sanggeun Song ; Bongjoon Kim ; Sangjun Lee 等
期刊名称：Mobile Information Systems
印刷版ISSN：1574-017X
出版年度：2016
卷号：2016
DOI：10.1155/2016/2946735
出版社：Hindawi Publishing Corporation
摘要：Due to recent indiscriminate attacks of ransomware, damage cases including encryption of users’ important files are constantly increasing. The existing vaccine systems are vulnerable to attacks of new pattern ransomware because they can only detect the ransomware of existing patterns. More effective technique is required to prevent modified ransomware. In this paper, an effective method is proposed to prevent the attacks of modified ransomware on Android platform. The proposed technique specifies and intensively monitors processes and specific file directories using statistical methods based on Processor usage, Memory usage, and I/O rates so that the process with abnormal behaviors can be detected. If the process running a suspicious ransomware is detected, the proposed system will stop the process and take steps to confirm the deletion of programs associated with the process from users. The information of suspected and exceptional processes confirmed by users is stored in a database. The proposed technique can detect ransomware even if you do not save its patterns. Its speed of detection is very fast because it can be implemented in Android source code instead of mobile application. In addition, it can effectively determine modified patterns of ransomware and provide protection with minimum damage.