A pseudo feedback-based annotated TF-IDF technique for dynamic crypto-ransomware pre-encryption boundary delineation and features extraction

• Main Authors: Al-Rimy, Bander Ali Saleh, Maarof, Mohd. Aiziani, Alazab, Mamoun, Alsolami, Fawaz, Mohd. Shaid, Syed Zainudeen, Ghaleb, Fuad A., Al-Hadhrami, Tawfik, Ali, Abdullah Marish
• Format: Article
• Language: English
• Published: Institute of Electrical and Electronics Engineers Inc. 2020
• Subjects: QA75 Electronic computers. Computer science
• Online Access: http://eprints.utm.my/id/eprint/90680/1/MohdAizianiMaarof2020_APseudoFeedbackBasedAnnotatedTFIDF.pdf; http://eprints.utm.my/id/eprint/90680/; http://dx.doi.org/10.1109/ACCESS.2020.3012674
• Institution: Universiti Teknologi Malaysia

The cryptography employed against user files makes the effect of crypto-ransomware attacks irreversible even after detection and removal. Thus, detecting such attacks early, i.e. during pre-encryption phase before the encryption takes place is necessary. Existing crypto-ransomware early detection so...