- 期刊
Detection and Analysis Cerber Ransomware Based on Network Forensics Behavior
摘要
Kaspersky and other information security firms mentioned 2016 as the year of Ransomware. The impact of attacks has allowed financial damage on the business or individual. The FBI estimates that losses incurred in 2016 will top US$ 3 billion. Meanwhile, cyber criminals use malware: Trojans, Spyware, and Keyloggers, all of which require long tremendous effort to transfer benefits into their bank accounts; while Ransomware makes the process automatic and easy by using a business model of Ransomware as a Service (RaaS). Therefore, Ransomware are made more sophisticated and more effective as to avoid detection and analysis. In this paper, we present a new insight into detection by analyzing Cerber Ransomware using Network-Forensic-Behavioral-Based. This paper is aimed to reconstruct the attack of timestamp, to identify the infected host and malware, to compromise websites involved in the chain of infection, to find campaigns scripts, and to exploit kits and payload Ransomware.
延伸閱讀
- 左瑞麟、許晉銘、王旭正（2018）。Memory Forensic Analysis upon Ransomware in Exploiting WannaCry。載於國立東華大學（主編），NCS 2017 全國計算機會議（頁888-893）。國立東華大學。https://doi.org/10.29428/9789860544169.201801.0166
- Naeem, H., Guo, B., Naeem, M. R., & Vasan, D. (2019). Visual Malware Classification Using Local and Global Malicious Pattern. 電腦學刊, 30(6), 73-83. https://doi.org/10.3966/199115992019123006006
- Lee, T. Y. (2011). Packed Malware Detection Based on Behavior Classification [master's thesis, National Taiwan University]. Airiti Library. https://doi.org/10.6342/NTU.2011.03279
- 石翔尹（2021）。Prevent the threat of ransomware by analyzing resource usage〔碩士論文，淡江大學〕。華藝線上圖書館。https://www.airitilibrary.com/Article/Detail?DocID=U0002-0407202120003000
- 吳嘉龍（2017）。Network Risk Management and Information Security Technology Against Ransomware Malicious Codes Attack。危機管理學刊，14(2)，23-31。https://doi.org/10.6459/JCM.201709_14(2).0003