Citation

Siaw, Ze Yuan and Chong, Siew Chin and Chong, Lee Ying (2025) A Practical Framework for Ransomware Detection and Mitigation Strategies. In: 2025 International Conference on Information and Communication Technology, ICoICT 2025, 30 July 2025 - 31 July 2025, Hybrid, Bandung.

Text A_Practical_Framework_for_Ransomware_Detection_and_Mitigation_Strategies.pdf - Published Version Restricted to Repository staff only Download (628kB)

Abstract

Ransomware attacks have emerged as one of the most significant cyber threats, particularly targeting financial organizations, with incidents rising from 48% in 2020 to 64% in 2023. Despite the increasing frequency of ransomware attacks, existing detection mechanisms struggle to effectively identify and mitigate new and evolving ransomware variants, leaving financial organizations highly vulnerable to cyber extortion. This paper presents a comprehensive detection algorithm aimed at well-known ransomware families such as WannaCry, NotPetya, Locky, and Ryuk, alongside a practical strategy for detection and prevention. Additionally, the proposed ransomware detection system examines suspicious strings, heuristic rules, file structures, executable file extensions, and Command and Control (CnC) server patterns. Evaluated against a dataset of 144 files, including both ransomware samples and benign documents, the system achieves an accuracy of over 81%, a precision of 82.86%, and a recall of 80.56%. Finally, the study outlines a multi-layered mitigation strategy encompassing prevention, detection, incident response, and recovery procedures

Item Type:	Conference or Workshop Item (Paper)
Additional Information:	Cybersecurity, mitigation strategies, ransomware detection
Subjects:	Q Science > QA Mathematics > QA71-90 Instruments and machines > QA75.5-76.95 Electronic computers. Computer science
Divisions:	Faculty of Information Science and Technology (FIST)
Depositing User:	Nor Afiqah Mohd Adnan
Date Deposited:	02 Dec 2025 08:25
Last Modified:	02 Dec 2025 08:25
URII:	http://shdl.mmu.edu.my/id/eprint/14937

Downloads

Edit (login required)