RansomSOC: A more effective security operations center to detect and respond to ransomware attacks

• Main Authors: LAI, Anthony Cheuk Tung, KE, Ping Fan, CHAN, Kelvin, YIU, Siu Ming, KIM, Dongsun, WONG, Wai Kin, WANG, Shuai, MUPPALA, Joseph, HO, Alan
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2022
• Subjects: Ransomware; Virus; Malware; Databases and Information Systems; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/7272
• Institution: Singapore Management University

Ransomware remains a major threat for organizations. Despite a lot of research done, existing solutions still have at least two shortcomings. (I) Slow detection time: by the time we realize that the system is under ransomware attack, almost all files have been encrypted. (II) Without a ransomwareawa...