Efficient detection and neutralization of ransomware

近年来越来越重要的恶意软件类别是勒索软件，这是一种阻止数据和系统的所有者访问数据和系统的恶意软件(通常使用锁定或加密机制)，并要求受害者向攻击者支付赎金才能重新访问。对于一些简单形式的勒索软件，可以找到密钥并解密加密的用户文件(这样受害者就不必向攻击者支付赎金)，但其他形式的勒索软件要复杂得多，找到密钥相应地更难。该项目的目标是找到比使用当前技术更有效地检测勒索软件和更有效地中和勒索软件的方法(特别是在电子邮件和网络网关上，在勒索软件到达最终用户设备之前)。

An increasingly important category of malware in recent years is ransomware, which is a type of malware that prevents data and systems from being accessed by their owners (often using locking or encryption mechanisms) and requires victims to pay a ransom to the attacker in order to regain access. For some simple forms of ransomware it is possible to find the key and decrypt the encrypted user files (so that the victim does not have to pay the ransom to the attacker), but other forms of ransomware are significantly more sophisticated and finding the key is correspondingly more difficult. The goal of this project is to find ways to detect ransomware more efficiently and neutralize ransomware more effectively (in particular, at the e-mail and web gateways before it reaches end-user devices) than is possible using current technology.