Automatically Traceback RDP-Based Targeted Ransomware Attacks
Joint Authors
Tian, Zhihong
Qiu, Jing
Wang, ZiHan
Liu, ChaoGe
Cui, Xiang
Su, Shen
Source
Wireless Communications and Mobile Computing
Issue
Vol. 2018, Issue 2018 (31 Dec. 2018), pp.1-13, 13 p.
Publisher
Hindawi Publishing Corporation
Publication Date
2018-12-06
Country of Publication
Egypt
No. of Pages
13
Main Subjects
Information Technology and Computer Science
Abstract EN
While various ransomware defense systems have been proposed to deal with traditional randomly-spread ransomware attacks (based on their unique high-noisy behaviors at hosts and on networks), none of them considered ransomware attacks precisely aiming at specific hosts, e.g., using the common Remote Desktop Protocol (RDP).
To address this problem, we propose a systematic method to fight such specifically targeted ransomware by trapping attackers via a network deception environment and then using traceback techniques to identify attack sources.
In particular, we developed various monitors in the proposed deception environment to gather traceable clues about attackers, and we further design an analysis system that automatically extracts and analyze the collected clues.
Our evaluations show that the proposed method can trap the adversary in the deception environment and significantly improve the efficiency of clue analysis.
Furthermore, it also helps us trace back RDP-based ransomware attackers and ransomware makers in the practical applications.
American Psychological Association (APA)
Wang, ZiHan& Liu, ChaoGe& Qiu, Jing& Tian, Zhihong& Cui, Xiang& Su, Shen. 2018. Automatically Traceback RDP-Based Targeted Ransomware Attacks. Wireless Communications and Mobile Computing،Vol. 2018, no. 2018, pp.1-13.
https://search.emarefa.net/detail/BIM-1216266
Modern Language Association (MLA)
Wang, ZiHan…[et al.]. Automatically Traceback RDP-Based Targeted Ransomware Attacks. Wireless Communications and Mobile Computing No. 2018 (2018), pp.1-13.
https://search.emarefa.net/detail/BIM-1216266
American Medical Association (AMA)
Wang, ZiHan& Liu, ChaoGe& Qiu, Jing& Tian, Zhihong& Cui, Xiang& Su, Shen. Automatically Traceback RDP-Based Targeted Ransomware Attacks. Wireless Communications and Mobile Computing. 2018. Vol. 2018, no. 2018, pp.1-13.
https://search.emarefa.net/detail/BIM-1216266
Data Type
Journal Articles
Language
English
Notes
Includes bibliographical references
Record ID
BIM-1216266