RANSOMWARE AND CRYPTOJACKING DETECTION USING INTRUSION DETECTION SYSTEM (IDS)

• Main Author: Jonathan
• Format: Final Project
• Language: Indonesia
• Online Access: https://digilib.itb.ac.id/gdl/view/53883
• Institution: Institut Teknologi Bandung

Malware are evolving, this happened due to technological advancements and enhancements to the internet world. Malwares are evolving in both forms and techniques. Ransomware and Cryptojacking are new malware types that become very annoying and disruptive, also destructive in their own way. Also, both malwares’ targets are connected to the rising scale on economics. So, an Intrusion Detection System is one of the best ways to detect both malware types. Using the characteristics of Ransomware and Cryptojacking, the approach that current Intrusion Detection System takes is host-based and also using anomaly detection for inference. However, anomaly and signature detection only is not enough, because some factors is not clear or classified itu fuzzy factors. As a development and enhancement, fuzzy logic is used for inference regarding rules that correspond with system performance and help develop a detection system that more flexible instead of the rigid detection system to handle new malwares and not relying on anomaly and signature only. Fuzzy system in this project will only be used on inference in rules that correspond with system performance, while rule based approach will still be used in other rules in the Host-based Intrusion Detection System that is used in this project, which is OSSEC. Ransomware and cryptojacking detection can be done however will need more development in the future.