Systematic literature review and metadata analysis of ransomware attacks and detection mechanisms

Maigida, Abdullahi Mohammed; Abdulhamid, Shafií Muhammad; Olalere, Morufu; Alhassan, John K.; Chiroma, Haruna; Dada, Emmanuel Gbenga

doi:10.1007/s40860-019-00080-3

Cited by 58 publications

(28 citation statements)

References 38 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…1. Generalized overview of atack phases of ransomware in which items in the model build upon [16,23,41,100,119].…”

Section: Infection Extortion Communication With Candc Destructionmentioning

confidence: 99%

“…A generalized overview of ransomware attack phases is shown in Figure 1 which we build upon prior studies [16,23,41,100,119]. Although some ransomware may not possess an individual phase in the shown model, such as Communication with C&C, our model here in this work generalizes the attack phases of ransomware.…”

Section: Infection Extortion Communication With Candc Destructionmentioning

confidence: 99%

See 1 more Smart Citation

A Survey on Ransomware: Evolution, Taxonomy, and Defense Solutions

et al. 2022

View full text Add to dashboard Cite

In recent years, ransomware has been one of the most notorious malware targeting end-users, governments, and business organizations. It has become a very profitable business for cybercriminals with revenues of millions of dollars, and a very serious threat to organizations with financial loss of billions of dollars. Numerous studies were proposed to address the ransomware threat, including surveys that cover certain aspects of ransomware research. However, no study exists in the literature that gives the complete picture on ransomware and ransomware defense research with respect to the diversity of targeted platforms. Since ransomware is already prevalent in PCs/workstations/desktops/laptops, is becoming more prevalent in mobile devices, and has already hit IoT/CPS recently, and will likely grow further in the IoT/CPS domain very soon, understanding ransomware and analyzing defense mechanisms with respect to target platforms is becoming more imperative. In order to fill this gap and motivate further research, in this paper, we present a comprehensive survey on ransomware and ransomware defense research with respect to PCs/workstations, mobile devices, and IoT/CPS platforms. Specifically, covering 137 studies over the period of 1990-2020, we give a detailed overview of ransomware evolution, comprehensively analyze the key building blocks of ransomware, present a taxonomy of notable ransomware families, and provide an extensive overview of ransomware defense research (i.e., analysis, detection, and recovery) with respect to platforms of PCs/workstations, mobile devices, and IoT/CPS. Moreover, we derive an extensive list of open issues for future ransomware research. We believe this survey will motivate further research by giving a complete picture on state-of-the-art ransomware research.

show abstract

“…1. Generalized overview of atack phases of ransomware in which items in the model build upon [16,23,41,100,119].…”

Section: Infection Extortion Communication With Candc Destructionmentioning

confidence: 99%

Section: Infection Extortion Communication With Candc Destructionmentioning

confidence: 99%

A Survey on Ransomware: Evolution, Taxonomy, and Defense Solutions

et al. 2022

View full text Add to dashboard Cite

show abstract

“…Berbagai bentuk cybercrime yang sering digunakan oleh pelaku (Cascavilla et al, 2021;Maigida et al, 2019), diantaranya berupa spoofing email merupakan pemalsuan header email. Pesan email yang diterima tampaknya telah dikirim oleh sumber asli, aktual dan terpercaya.…”

Section: Tinjauan Pustaka Cybercrime Dan Cybersecurityunclassified

Cybercrime dan Cybersecurity pada Fintech: Sebuah Tinjauan Pustaka Sistematis

Riskiyadi

Anggono

Tarjo

2021

JMO

View full text Add to dashboard Cite

This study is intended to determine the cybercrime challenges faced by the fintech industry as well as anticipatory actions in the form of cybersecurity to overcome these challenges. This study employs a systematic literature review method from various articles discussing cybercrime and cybersecurity in fintech that were published in reputable online databases. The findings indicate that cybercrime problems in fintech consist of cybercrime regulations that are not strict, data and information theft, and intellectual property theft in which impacting on the reputation of fintech. Cybersecurity as an attempt to tackle cybercrime in fintech can be performed through proactive action, strengthening regulations, and establishing a reliable cybersecurity framework or procedure. The implications of this research are as an additional reference for academics, practitioners, regulators, and fintech actors related to the fast pace development of cybercrime and cybersecurity in fintech. The limitation of this study is that it only provides an overview and elaborate the results of prior studies instead of provide a further analysis of the relationship between the articles discussed. Recommendations for further research are to increase the scope of the articles studied or apply other literature review methods or conduct empirical research to confirm the results of this study.

show abstract

“…The upsurge in cyber-attacks and data exploitation has made the need for digital investigations paramount [1]- [3]. Standardization and adherence to best practices have become essential to ensure the least amount of human error causing inadmissible evidence [4], [5]. Forensic artefacts are very important when it comes to investigation and litigation, as they provide the details of an incident [6], [7].…”

Section: Introductionmentioning

confidence: 99%

Secure Storage Model for Digital Forensic Readiness

2022

View full text Add to dashboard Cite

Securing digital evidence is a key factor that contributes to evidence admissibility during digital forensic investigations, particularly in establishing the chain of custody of digital evidence. However, not enough is done to ensure that the environment and access to the evidence are secure. Attackers can go to extreme lengths to cover up their tracks, which is a serious concern to digital forensics particularly digital forensic readiness. If an attacker gains access to the location where evidence is stored, they could easily alter the evidence (if not remove it altogether). Even though integrity checks can be performed to ensure that the evidence is sound, the collected evidence may contain sensitive information that an attacker can easily use for other forms of attack. To this end, this paper proposes a model for securely storing digital evidence captured pre-and post-incident to achieve reactive forensics. Various components were considered, such as integrity checks, environment sandboxing, strong encryption, twofactor authentication, as well as unique random file naming. A proof-of-concept tool was developed to realize this model and to prove its validity. A series of tests were conducted to check for system security, performance, and requirements validation, Overall, the results obtained showed that, with minimal effort, securing forensic artefacts is a relatively inexpensive and reliable feat. This paper aims to standardize evidence storage, practice high security standards, as well as remove the need to create new systems that achieve the same purpose.

show abstract

Systematic literature review and metadata analysis of ransomware attacks and detection mechanisms

Cited by 58 publications

References 38 publications

A Survey on Ransomware: Evolution, Taxonomy, and Defense Solutions

A Survey on Ransomware: Evolution, Taxonomy, and Defense Solutions

Cybercrime dan Cybersecurity pada Fintech: Sebuah Tinjauan Pustaka Sistematis

Secure Storage Model for Digital Forensic Readiness

Contact Info

Product

Resources

About