Skip to main content
Disciplines
Automotive Business IT + Informatics Construction + Real Estate Electrical Engineering + Electronics Energy + Sustainability Insurance + Risk Finance + Banking Management + Leadership Marketing + Sales Mechanical Engineering + Materials
DE
EN
Books
Journals
Events
Topic Page
Marketing
Start single access now
Access for companies
12th International Engine Congress 2025 | 25. + 26. February 2025

Meeting Place for the Powertrain and Sustainable Fuels Community

The congress will examine the future role of the internal combustion engine and its non-fossil fuels from a global perspective with leading experts. Be part of it! More information and booking options are available on our website.
EXTENDED SEARCH
Log in
Top
Annals of Data Science
Published in:

08-06-2022

A review on spreading and Forensics Analysis of Windows-Based ransomware

Authors: Narendrakumar Mangilal Chayal, Ankur Saxena, Rijwan Khan

Published in: Annals of Data Science | Issue 5/2024

Log in

Activate our intelligent search to find suitable subject content or patents.

search-config
loading …

Abstract

Ransomware is one of the most advanced malware which uses high computer resources and services to encrypt system data once it infects a system and causes large financial data losses to the organization and individuals. There are certain automatic ransomware detection and analysis strategies available nowadays. File system analysis reveals some essential patterns and artifacts that can be very useful to understand its behavior spreading mechanism, taxonomy for malware forensics experts. Current trend explores Ransomware as a service (RaaS) and Malware as a service (MaaS) on Darknet. This paper reveals a theory of digital forensic methodology to identify the spreading/infection mechanism and attack path, the cryptographic methodology, windows services, process, APIs, persistence mechanism, and system lockdown strategies and malware analysis methodology. This review could be helpful to learn and understand malware forensic analysis for threat researchers, students, cyber experts, etc.
next article An Improved K-means Clustering Algorithm Towards an Efficient Data-Driven Modeling

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 390 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Maschinenbau + Werkstoffe




 

Jetzt Wissensvorsprung sichern!

inform now

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

inform now

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 340 Zeitschriften

aus folgenden Fachgebieten:

  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Versicherung + Risiko




Jetzt Wissensvorsprung sichern!

inform now
Literature
1.
Monnappa KA (2018) Learning Malware Analysis,Packt Publishing LTD, Birmingham-Mumbai, U.K,
2.
Yuri, Diogenes (2018) Erdal Ozkaya,Cyber Security-Attack and Defense Strategies. Packt Publishing LTD, Birmingham-Mumbai, U.K
3.
Preparing for Ransomware, Grossman J (2017) RSA Conference Feb 13–17, San Fransico
4.
5.
Camelia Simoiu C, Gates J, Bonneau S, Goel (2019) I was told to buy a software or lose my computer. I ignored it”: A study of ransomware, SOUPS’19: Proceedings of the Fifteenth USENIX Conference on Usable Privacy and Security,August Pages 155–174
6.
Lucrative ransomware attacks: Analysis of the cryptowall version 3 threat. Technical report, Cyber Threat Alliance (2015) accessed on 21-04-2020
7.
8.
Sonu B, Surati GI, Prajapati, A Review on Ransomware Detection & Prevention, International Journal of Research and Scientific Innovation (IJRSI), Volume IV, Issue IX(2017) September
9.
Zavarsky P, Lindskog D(2016) “Experimental Analysis of Ransomware on Windows and Android Platforms: Evolution and Characterization,” vol. 94, pp. 465–472,
10.
11.
12.
Lorenzo Fernández Maimó, Alberto Huertas Celdrán ÁngelL, Perales Gómez,Félix J(2019) García Clemente,James Weimer,Insup Lee Intelligent and Dynamic Ransomware Spread Detection and Mitigation in Integrated Clinical Environments, Sensors (Basel). March
13.
14.
15.
Mohanta A, Hahad M, Velmurugan K (2018) Preventing Ransomware Understand, prevent, and remediate ransomware attacks. Packt Publishing Ltd, UK March
16.
Allan Liska T, Gallo (2017) Ransomware Defending against Digital Extortion. O’Reilly Media Inc. US
17.
Daniele Sgandurra M, Software, Smart Card and IOT Security Center,University of London, 28/02/2017
18.
Daniele Sgandurra,The Evolution of Ransomware Dissecting Ransomware,Smart Card and IOT Security Center,University of London, 28/02/2017
19.
Dr E, Dilipraj, SUPPOSED CYBER ATTACK ON KUDANKULAM NUCLEAR INFRASTRUCTURE - A BENIGN REMINDER OF A POSSIBILE REALITY, Center for Air Power Studies, 12 November 2019
20.
Joshua, Saxe (2018) Hillary Sanders, Malware Data Science Attack Detection and Attribution. No Starch Press, San Francisco
21.
Cameron H, Mailin E, Casey JM, Aquilina(2014) Malware Forensics Field For Linux Systems Digital Forensics Field Guides, Elsevier, USA
22.
Sumith Maniath A, Ashok P, Poornachandran, Sujadevi VG (2017) Prem Sankar, Srinath Jan, Deep Learning LSTM based Ransomware Detection. Recent Developments in Control Automation and Power Engineering, IEEE,
23.
Petya Like Ransmoware Analysis (2017)Nyotron Securing the world, June
24.
Wan Y-L, Chang J-C, Chen R-J, Wan S-J(2018) Feature-Selection-Based Ransomware Detection with Machine Learning of Data Analysis, 3rd International Conference on Computer and Communication Systems, April Japan
25.
Smruti, Saxena(2018) Hemant Kumar Soni, Strategies for Ransomware Removal and Prevention, 4th International Conference on Advances in Electrical, Electronics, Information, Communication and Bio-Informatics, Chennai, India,
26.
Sherer JA, McLellan ML, Emily R, Fedeles NL, Sterling(2017) Ransomware- Practical and legal consideration for confronting the new economic engine of the dark web,Richmond Journal of Law and Technology, Vol 23, Issue 3,
27.
Maxat Akbanov, Vassilios G, Vassilakis ID, Moscholios MD (2018) Logothetis, Static and Dynamic Analysis of WannaCry Ransomware. IEICE Information and Communication Technology Forum
28.
O’Brien D(2017) “Ransomware 2017”, Internet Security Threat Report, Symantec, July
29.
Cabaj K, Gregorczyk M, Mazurczyk W (Feb. 2018) Software-defined networking-based crypto ransomware detection using HTTP traffic characteristics. Comput Electr Eng 66:353–386
30.
Aditya Tandon A, Nayyar (2018) A Comprehensive Survey on Ransomware Attack: A Growing Havoc Cyberthreat. Springer Nature
31.
32.
Nihad AHassan, Hijazi R (2017) Digital Privacy and Security using Windows A practical Guide. Apress, New York
33.
34.
Young AL, Yung M (2017) Cryptovirology: The birth, neglect, and explosion of ransomware. Commun ACM 60(7):24–26CrossRef
35.
Mercaldo F, Nardone V, Santone A(2016), August Ransomware inside out. In 2016 11th International Conference on Availability, Reliability and Security (ARES) (pp. 628–637). IEEE
36.
Mansfield-Devine S(2016) Ransomware: Taking businesses hostage. Network Security, 2016(10), 8–17
37.
. Mercaldo F, Nardone V, Santone A, Visaggio CA(2016), June Ransomware steals your phone, formal methods rescue it. In International Conference on Formal Techniques for Distributed Objects, Components, and Systems, 2016
38.
Kinder J, Katzenbeisser S, Schallhart C, Veith H (2005) Detecting malicious codeby model checking. Springer
39.
Tj, O’Conner (2013) Violent Python A Cookbook for Hackers, Forensic Analysts, Penetration Testers and Security Engineers. Syngrees Elsevier
40.
Ashok Kumar D, Venugopalan SR(2017) Intrusion detection systems: A review, International Journal of Advanced Research in Computer Science, Volume 8, No. 8, September-October
41.
Howard M (2003) David Leblanc, Writing Secure Code. Microsoft Press Washington
42.
Dolly Uppal VM, Verma V(2014) Basic survey on Malware Analysis, Tools and Techniques,International Journal on Computational Sciences & Applications, Vol. 4, No.1,
43.
Peter, Kim (July 2015) The hacker playbook 2 Practical Guide to Penetration Testing. Secure Planet LLC
44.
Chris, Anley(2007) Neel MehtaJohn Heasman, Felix, Gerado Richarte, he Shellcoder’s Handbook Discovering and Exploiting Security Holes 2nd Edition, Wiley Publishing Inc,
45.
Ludwig M (1998) Giant Black Book of Computer Viruses. American Eagle Publications, Arizona
46.
Peter, Szor (Feb 2005) The Art of Computer Virus Research and Defense. Addison Wesley Professional
47.
Hyde R(2010) The Art of Assembly Language 2nd Edition, no starch press, San Francisco,
48.
Saxena A, Badal D(2017) A Robust and Deterministic Digital Watermarking Technique Based on Cosine Transform
49.
Andrew Bettany MVP, Halsey M(2017)Windows Virus and Malware Troubleshooting, Apress,
50.
Anson S, Bunting S, Johnson R(2012) Scott Pearson, Mastering Windows Network Forensics and Investigation 2nd Edition, Wiley Inc,
51.
Christopher C(2015) Elisan, Advanced MalwareAnalysis, McGrawHill, USA,
52.
Sirosi M, Honig A (2012) Practical Malware Analysis the hands-on guide to dissecting malicious software. No Starch Press, San Francisco
53.
Micheal Hale A, Case J, Levy A, Walters (2014) The Art of Memory Forensics. John Wiley & Sons, Canada
54.
55.
Lee JK, Moon SY, Park JH(2017) CloudRPS: A cloud analysis based enhanced ransomware prevention system. The Journal of Supercomputing, 73(7) • July 2016
57.
Lee JK, Moon SY, Park JH(2017) CloudRPS: A cloud analysis based enhanced ransomware prevention system. The Journal of Supercomputing, 73(7) • July 2016
58.
Lee JK, Moon SY, Park JH(2017) CloudRPS: A cloud analysis based enhanced ransomware prevention system. The Journal of Supercomputing, 73(7) · July 2016
59.
60.
61.
62.
63.
64.
Monika P, Zavarsky D, Lindskog(2016) Experimental Analysis of Ransomware on Windows and Android Platforms: Evolution and Characterization, The 2nd International Workshop on Future Information Security, Privacy & Forensics for Complex Systems, Procedia Computer Science 94 465–472
65.
Mohanta A (2018) Kumaraguru Velmurugan, and Mounir Hahad, Preventing Ransomware: Understand, prevent, and remediate ransomware attacks. Packt Publishing
66.
67.
68.
69.
Kharraz A, Kirda E(2017) Redemption: Real-time protection against ransomware at end-hosts. In: International Symposium on Research in Attacks, Intrusions, and Defenses, pp. 98–119. Springer
70.
Zscaler N (2016) White paper: Ransomware is costing companies millions could it cost you your job? Tech. rep., Zscaler, 110 Rose Orchard Way. CA 95134, USA, San Jose
71.
Sgandurra D, Muñoz-González L, Mohsen R, Lupu EC (2016) Automated Dynamic Analysis of Ransomware: Benefits. Limitations and use for Detection, ArXiv e-prints
72.
73.
74.
75.
76.
77.
Chayal NM, Patel NP (2021) Review of Machine Learning and Data Mining Methods to Predict Different Cyberattacks. In: Kotecha K, Piuri V, Shah H, Patel R (eds) Data Science and Intelligent Applications. Lecture Notes on Data Engineering and Communications Technologies, vol 52. Springer, Singapore. https://​doi.​org/​10.​1007/​978-981-15-4474-3_​5.CrossRef
78.
79.
Custers BHM, Oerlemans JJ, Pool R (2020) Laundering the Profits of Ransomware: Money Laundering Methods for Vouchers and Cryptocurrencies. Eur J Crime Criminal Law Criminal Justice 28:121–152CrossRef
80.
81.
Shi Y (2022) Advances in big data analytics: theory, algorithms and practices. Springer Nature
82.
Olson DL, Shi Y, Shi Y (2007) Introduction to business data mining, vol 10. McGraw-Hill/Irwin, New York, pp 2250–2254
83.
Shi Y, Tian Y, Kou G, Peng Y, Li J (2011) Optimization based data mining: theory and applications. Springer Science & Business Media
84.
Janssens J (2021) Data Science at the Command Line. " O’Reilly Media, Inc.“
Metadata
Title
A review on spreading and Forensics Analysis of Windows-Based ransomware
Authors
Narendrakumar Mangilal Chayal
Ankur Saxena
Rijwan Khan
Publication date
08-06-2022
Publisher
Springer Berlin Heidelberg
Published in
Annals of Data Science / Issue 5/2024
Print ISSN: 2198-5804
Electronic ISSN: 2198-5812
DOI
https://doi.org/10.1007/s40745-022-00417-5

Other articles of this Issue 5/2024

Artificial Intelligence Algorithms for Collaborative Book Recommender Systems

  • Open Access

Unified Image Harmonization with Region Augmented Attention Normalization

Applying an Information Retrieval Approach to Retrieve Relevant Articles in the Legal Domain

Utilization of Priori Information in the Estimation of Population Mean for Time-Based Surveys

On Progressively Censored Generalized X-Exponential Distribution: (Non) Bayesian Estimation with an Application to Bladder Cancer Data

Patient Questionnaires Based Parkinson’s Disease Classification Using Artificial Neural Network

Premium Partner

    Image Credits