Efficient detection and neutralization of ransomware

点击翻译按钮获取中文摘要

An increasingly important category of malware in recent years is ransomware, which is a type of malware that prevents data and systems from being accessed by their owners (often using locking or encryption mechanisms) and requires victims to pay a ransom to the attacker in order to regain access. For some simple forms of ransomware it is possible to find the key and decrypt the encrypted user files (so that the victim does not have to pay the ransom to the attacker), but other forms of ransomware are significantly more sophisticated and finding the key is correspondingly more difficult. The goal of this project is to find ways to detect ransomware more efficiently and neutralize ransomware more effectively (in particular, at the e-mail and web gateways before it reaches end-user devices) than is possible using current technology.