Skip to main content
Top

2021 | OriginalPaper | Chapter

Detection of Ransomware on Windows System Using Machine Learning Technique: Experimental Results

Authors : Laxmi B. Bhagwat, Balaji M. Patil

Published in: Advanced Computing

Publisher: Springer Singapore

Activate our intelligent search to find suitable subject content or patents.

search-config
loading …

Abstract

Recent statistics show that malware attacks have been increased by over 97% in the past two years. Among these, a large portion is due to Ransomware, a subset of malware. Ransomware codes are easily available as Ransomware as-a-service (RaaS). Because of it, there is a significant threat to the world, as this is a malware which generates high revenues and is creating a viable criminal business model. Because of this the systems of private companies, individuals, or public service providers are at stake and can suffer a severe disruption and financial loss. There are two methods for the detection and analysis to be done for the detection of ransomware. One is the Static detection approach and the other is the Dynamic detection approach. We have done the detection using the Dynamic approach. This paper focuses on detection of ransomware and benign applications using machine learning algorithms for dynamic detection of ransomware. Our experimentation results show that high accuracy is obtained using the KNN algorithm.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 390 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Maschinenbau + Werkstoffe




 

Jetzt Wissensvorsprung sichern!

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 340 Zeitschriften

aus folgenden Fachgebieten:

  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Versicherung + Risiko




Jetzt Wissensvorsprung sichern!

Literature
1.
go back to reference Continella, A., et al.: ShieldFS: a self-healing, ransomware-aware filesystem. In: ACSAC 2016: Proceedings of the 32nd Annual Conference on Computer Security Applications, pp. 336–347, December 2016 Continella, A., et al.: ShieldFS: a self-healing, ransomware-aware filesystem. In: ACSAC 2016: Proceedings of the 32nd Annual Conference on Computer Security Applications, pp. 336–347, December 2016
3.
go back to reference Chen, Z.-G., Kang, H.-S., Yin, S.-N., Kim, S.-R.: Automatic ransomware detection and analysis based on dynamic API calls flow graph. In: RACS 2017, pp. 20–23. Association for Computing Machinery, September 2017 Chen, Z.-G., Kang, H.-S., Yin, S.-N., Kim, S.-R.: Automatic ransomware detection and analysis based on dynamic API calls flow graph. In: RACS 2017, pp. 20–23. Association for Computing Machinery, September 2017
4.
go back to reference Daku, H., Zavarsky, P., Yasir Malik, K..: Behavioral-based classification and identification of ransomware variants using machine learning. In: 17th IEEE International Conference on Trust, Security and Privacy. In: Computing and Communications/12th IEEE International Conference on Big Data Science and Engineering (2018) Daku, H., Zavarsky, P., Yasir Malik, K..: Behavioral-based classification and identification of ransomware variants using machine learning. In: 17th IEEE International Conference on Trust, Security and Privacy. In: Computing and Communications/12th IEEE International Conference on Big Data Science and Engineering (2018)
5.
go back to reference Kesselman, D.N.: A behavioural-based approach to ransomware detection. In: MWR Labs Whitepaper Kesselman, D.N.: A behavioural-based approach to ransomware detection. In: MWR Labs Whitepaper
6.
go back to reference Sgandurra, D., Muñoz-González, L., Mohsen, R., Lupu, E.C.: Automated Dynamic Analysis of Ransomware: Benefits, Limitations and use for Detection. arXiv:1609.03020v1 Sgandurra, D., Muñoz-González, L., Mohsen, R., Lupu, E.C.: Automated Dynamic Analysis of Ransomware: Benefits, Limitations and use for Detection. arXiv:​1609.​03020v1
7.
go back to reference Monika, P.Z., Dale, L.: Experimental analysis of ransomware on windows and Android platforms: evolution and characterization. In: 2nd International Workshop on Future Information Security, Privacy & Forensics for Complex Systems (FISP 2016) (2016) Monika, P.Z., Dale, L.: Experimental analysis of ransomware on windows and Android platforms: evolution and characterization. In: 2nd International Workshop on Future Information Security, Privacy & Forensics for Complex Systems (FISP 2016) (2016)
8.
go back to reference Wan, Y.-L., Chang, J.-C., Chen, R.-J., Wang, S.-J.: Feature-selection-based ransomware detection with machine learning of data analysis. In: 3rd International Conference on Computer and Communication Systems (2018) Wan, Y.-L., Chang, J.-C., Chen, R.-J., Wang, S.-J.: Feature-selection-based ransomware detection with machine learning of data analysis. In: 3rd International Conference on Computer and Communication Systems (2018)
11.
go back to reference Almashhadani, A.O., Kaiiali, M., Sezer, S., O’Kane, P.: A multi-classifier network-based crypto ransomware detection system: A case study of locky ransomware. IEEE Access 7, 47053–47067 (2019)CrossRef Almashhadani, A.O., Kaiiali, M., Sezer, S., O’Kane, P.: A multi-classifier network-based crypto ransomware detection system: A case study of locky ransomware. IEEE Access 7, 47053–47067 (2019)CrossRef
Metadata
Title
Detection of Ransomware on Windows System Using Machine Learning Technique: Experimental Results
Authors
Laxmi B. Bhagwat
Balaji M. Patil
Copyright Year
2021
Publisher
Springer Singapore
DOI
https://doi.org/10.1007/978-981-16-0401-0_32

Premium Partner