Complex Ransomware Counteraction Technique
Dmitry Tanana · 2019 International Multi-Conference on Engineering, Computer and Information Sciences (SIBIRCON) · 2019
The article considers question of ransomware counteraction. Brief history and definition of ransomware are descried aswell as reasons for designing custom counteraction technique. We propose complex counteraction technique based on key interception and special encoding. Prototype counteraction program was designed under assumptions that ransomware is using OpenSSL library for purpose of key interception or AES cipher for purpose of special encoding. The program was tested in controlled virtual machine environment and achieved 40% success rate against selected number of ransomware samples. Generalization of proposed technique is also discussed.