Ransomware and Reputation
Ransomware and Reputation
复制标题
DOI：
10.3390/g10020026
复制
发表时间：
2019-06-01
期刊：
影响因子：
0.9
通讯作者：
Cartwright, Edward
中科院分区：
文献类型：
--
作者：
Cartwright, Anna;Cartwright, Edward
勒索软件是一种特殊形式的网络攻击，受害者无法访问其电子设备或文件，除非他向罪犯支付赎金。犯罪分子从勒索软件中赚钱的能力很大程度上取决于受害者是否相信犯罪分子会支付赎金。在本文中，我们探讨了犯罪分子可以通过声誉建立信任的程度。我们证明，在某些情况下，罪犯总是归还文件是最优的，在某些情况下，罪犯总是归还文件是最优的。我们认为，建立声誉的能力将取决于受害者如何区分不同的勒索软件。如果勒索软件要成为犯罪分子的长期收入来源，那么他们需要找到建立良好声誉的方法。
Ransomware is a particular form of cyber-attack in which a victim loses access to either his electronic device or files unless he pays a ransom to criminals. A criminal's ability to make money from ransomware critically depends on victims believing that the criminal will honour ransom payments. In this paper we explore the extent to which a criminal can build trust through reputation. We demonstrate that there are situations in which it is optimal for the criminal to always return the files and situations in which it is not. We argue that the ability to build reputation will depend on how victims distinguish between different ransomware strands. If ransomware is to survive as a long term revenue source for criminals then they need to find ways of building a good reputation.