
Photo credit: Michael Geiger
Engineering researchers have developed a new approach for implementing ransomware detection techniques, allowing them to detect a broad range of ransomware far more quickly than previous systems.
Ransomware is a type of malware. When a system is infiltrated by ransomware, the ransomware encrypts that system’s data – making the data inaccessible to users. The people responsible for the ransomware then extort the affected system’s operators, demanding money from the users in exchange for granting them access to their own data.
Ransomware extortion is hugely expensive, and instances of ransomware extortion are on the rise. The FBI reports receiving 3,729 ransomware complaints in 2021, with costs of more than $49 million. What’s more, 649 of those complaints were from organizations classified as critical infrastructure.
“Computing systems already make use of a variety of security tools that monitor incoming traffic to detect potential malware and prevent it from compromising the system,” says Paul Franzon, co-author of a paper on the new ransomware detection approach. “However, the big challenge here is detecting ransomware quickly enough to prevent it from getting a foothold in the system. Because as soon as ransomware enters the system, it begins encrypting files.” Franzon is Cirrus Logic Distinguished Professor of Electrical and Computer Engineering at North Carolina State University.
“There’s a machine-learning algorithm called XGBoost that is very good at detecting ransomware,” says Archit Gajjar, first author of the paper and a Ph.D. student at NC State. “However, when systems run XGBoost as software through a CPU or GPU, it’s very slow. And attempts to incorporate XGBoost into hardware systems have been hampered by a lack of flexibility – they focus on very specific challenges, and that specificity makes it difficult or impossible for them to monitor for the full array of ransomware attacks.
“We’ve developed a hardware-based approach that allows XGBoost to monitor for a wide range of ransomware attacks, but is much faster than any of the software approaches,” Gajjar says.
The new approach is called FAXID, and in proof-of-concept testing, the researchers found it was just as accurate as software-based approaches at detecting ransomware. The big difference was speed. FAXID was up to 65.8 times faster than software running XGBoost on a CPU and up to 5.3 times faster than software running XGBoost on a GPU.
“Another advantage of FAXID is that it allows us to run problems in parallel,” Gajjar says. “You could devote all of the dedicated security hardware’s resources to ransomware detection, and detect ransomware more quickly. But you could also allocate the security hardware’s computing power to separate problems. For example, you could devote a certain percentage of the hardware to ransomware detection and another percentage of the hardware to another challenge – such as fraud detection.”
“Our work on FAXID was funded by the Center for Advanced Electronics through Machine Learning (CAEML), which is a public-private partnership,” Franzon says. “The technology is already being made available to members of the center, and we know of at least one company that is making plans to implement it in their systems.”
Original Article: New Approach Allows for Faster Ransomware Detection
More from: North Carolina State University
The Latest Updates from Bing News & Google News
Go deeper with Bing News on:
Ransomware detection
- Massive Ransomware Campaign Targets VMware ESXi Servers
A massive automated ransomware campaign is targeting VMware ESXi hypervisors worldwide, warns CERT-FR, the French government's computer emergency readiness team ...
- Is Insurance the Solution to, or the Enabler of, Ransomware?
Underwriters offer insurance products covering breach response costs, downtime, business interruption, and data recovery losses. Organizations able to prove they have a good security posture will ...
- Cyber Insights 2023 | Ransomware
Ultimately, beating ransomware will be down to individual organizations’ own cyber defenses – and this will be harder than ever in 2023.
- Intermittent Encryption Is A Growing Ransomware Threat That Requires A Proactive Cyber Defense
Hackers continue to demonstrate their ingenuity and sophistication in avoiding the cybersecurity arsenals of corporate defenders.
- Are we Losing the War Against Ransomware?
Changing approaches to ransomware, such as RaaS and the development of new tools, are making this vector more dangerous to organizations ...
Go deeper with Google Headlines on:
Ransomware detection
[google_news title=”” keyword=”ransomware detection” num_posts=”5″ blurb_length=”0″ show_thumb=”left”]
Go deeper with Bing News on:
FAXID
- Shah Lays Foundation Stone Of Rs 450-Cr Nano Urea Plant In J’khand
Shah said it will help in reducing the dependence on import of urea and usher in development of the eastern region, particularly the Santhal Paraganas.
- Union Home Minister lays foundation of IFFCO Nano Urea plant in Deoghar
Union Home and Cooperation Minister Amit Shah today performed the Bhumi Pujan and laid the foundation stone of the fifth plant of the world's first IFFCO Nano Urea Plant at Deoghar. Shah offered ...
- Amit Shah lays foundation stone of Rs 450-cr nano urea plant in Jharkhand
Deoghar: Union Home Minister Amit Shah Saturday laid the foundation stone of a Rs 450-crore nano urea plant and township of the Indian Farmers Fertiliser Cooperative (IFFCO) in Jharkhand’s Deoghar.
- Union Home Minister Amit Shah performs Bhumi Pujan, lays the foundation stone of the fifth unit of IFFCO Nano Urea Plant at Deoghar, Jharkhand
New Delhi: Union Home Minister and Minister of Cooperation, Shri Amit Shah performed Bhumi Pujan and laid the foundation stone of the fifth unit of IFFCO Nano Urea Plant at Deoghar, Jharkhand today.
- Global Internet of Nano Things Market [2023-2026] | Unlock Worldwide Market Potential with Our Professional Analyzed Research Report
For each manufacturer covered, this report analyzes their Internet of Nano Things manufacturing sites, capacity, production, ex-factory price, revenue, and market share in the global market. Global ...
Go deeper with Google Headlines on:
FAXID
[google_news title=”” keyword=”FAXID” num_posts=”5″ blurb_length=”0″ show_thumb=”left”]