Ransomware anti-analysis and evasion techniques: a survey and research directions

Ransomware has been proven to constitute a severe threat to the world's digital assets. Resources or devices' recovery from a Crypto-Ransomware infection is practically infeasible unless an error in the malicious cryptographic implementation has been made, as robust encryption is irreversi...

Full description

Saved in:
Bibliographic Details
Main Authors: Olaimat, M. N., Maarof, M. A., Al-rimy, B. A. S.
Format: Conference or Workshop Item
Language:English
Published: 2021
Subjects:
Online Access:http://eprints.utm.my/id/eprint/96020/1/MohammadNOlaimat2021_RansomwareAntiAnalysisandEvasion.pdf
http://eprints.utm.my/id/eprint/96020/
http://dx.doi.org/10.1109/CRC50527.2021.9392529
Tags: Add Tag
No Tags, Be the first to tag this record!
id my.utm.96020
record_format eprints
spelling my.utm.960202022-07-01T08:37:20Z http://eprints.utm.my/id/eprint/96020/ Ransomware anti-analysis and evasion techniques: a survey and research directions Olaimat, M. N. Maarof, M. A. Al-rimy, B. A. S. QA75 Electronic computers. Computer science Ransomware has been proven to constitute a severe threat to the world's digital assets. Resources or devices' recovery from a Crypto-Ransomware infection is practically infeasible unless an error in the malicious cryptographic implementation has been made, as robust encryption is irreversible. This paper attempts to justify as to why designing and deploying an effective and efficient detective solution against this particular malware category represents a formidable technical challenge. The paper starts with a recent presentation of the Ransomware's epidemic, as reported by the security industry. Subsequently, a taxonomy of Ransomware is presented. The anatomy of the malware's invariant intrusions and infection vectors are illustrated. In addition, the paper navigates and analyzes the various anti-analysis and evasive techniques that are deployable by Ransomware. In every context enumerated in the narrative, the technical difficulty being posed by this malware is illuminated. If a computer security researcher intends to devise a Crypto-Ransomware's preventive solution or a predictive or proactive one, then it is imperative to have a sound perception of the technical challenges that will manifest prior to launching the proposed research project - so as to be equipped to tackle the anticipated problems. This paper concludes with an advance notice underscoring the resilience of Ransomware intrusions and highlighting research open-problems. 2021 Conference or Workshop Item PeerReviewed application/pdf en http://eprints.utm.my/id/eprint/96020/1/MohammadNOlaimat2021_RansomwareAntiAnalysisandEvasion.pdf Olaimat, M. N. and Maarof, M. A. and Al-rimy, B. A. S. (2021) Ransomware anti-analysis and evasion techniques: a survey and research directions. In: 3rd International Cyber Resilience Conference, CRC 2021, 29 January 2021 - 31 January 2021, Virtual, Langkawi Island. http://dx.doi.org/10.1109/CRC50527.2021.9392529
institution Universiti Teknologi Malaysia
building UTM Library
collection Institutional Repository
continent Asia
country Malaysia
content_provider Universiti Teknologi Malaysia
content_source UTM Institutional Repository
url_provider http://eprints.utm.my/
language English
topic QA75 Electronic computers. Computer science
spellingShingle QA75 Electronic computers. Computer science
Olaimat, M. N.
Maarof, M. A.
Al-rimy, B. A. S.
Ransomware anti-analysis and evasion techniques: a survey and research directions
description Ransomware has been proven to constitute a severe threat to the world's digital assets. Resources or devices' recovery from a Crypto-Ransomware infection is practically infeasible unless an error in the malicious cryptographic implementation has been made, as robust encryption is irreversible. This paper attempts to justify as to why designing and deploying an effective and efficient detective solution against this particular malware category represents a formidable technical challenge. The paper starts with a recent presentation of the Ransomware's epidemic, as reported by the security industry. Subsequently, a taxonomy of Ransomware is presented. The anatomy of the malware's invariant intrusions and infection vectors are illustrated. In addition, the paper navigates and analyzes the various anti-analysis and evasive techniques that are deployable by Ransomware. In every context enumerated in the narrative, the technical difficulty being posed by this malware is illuminated. If a computer security researcher intends to devise a Crypto-Ransomware's preventive solution or a predictive or proactive one, then it is imperative to have a sound perception of the technical challenges that will manifest prior to launching the proposed research project - so as to be equipped to tackle the anticipated problems. This paper concludes with an advance notice underscoring the resilience of Ransomware intrusions and highlighting research open-problems.
format Conference or Workshop Item
author Olaimat, M. N.
Maarof, M. A.
Al-rimy, B. A. S.
author_facet Olaimat, M. N.
Maarof, M. A.
Al-rimy, B. A. S.
author_sort Olaimat, M. N.
title Ransomware anti-analysis and evasion techniques: a survey and research directions
title_short Ransomware anti-analysis and evasion techniques: a survey and research directions
title_full Ransomware anti-analysis and evasion techniques: a survey and research directions
title_fullStr Ransomware anti-analysis and evasion techniques: a survey and research directions
title_full_unstemmed Ransomware anti-analysis and evasion techniques: a survey and research directions
title_sort ransomware anti-analysis and evasion techniques: a survey and research directions
publishDate 2021
url http://eprints.utm.my/id/eprint/96020/1/MohammadNOlaimat2021_RansomwareAntiAnalysisandEvasion.pdf
http://eprints.utm.my/id/eprint/96020/
http://dx.doi.org/10.1109/CRC50527.2021.9392529
_version_ 1738510313063448576
score 13.211869