Enhancing Crypto Ransomware Detection Through Network Analysis and Machine Learning

View Sample PDF

Author(s): S. Metilda Florence (SRM Institute of Science and Technology, India), Akshay Raghava (SRM Institute of Science and Technology, India), M. J. Yadhu Krishna (SRM Institute of Science and Technology, India), Shreya Sinha (SRM Institute of Science and Technology, India), Kavya Pasagada (SRM Institute of Science and Technology, India)and Tanuja Kharol (SRM Institute of Science and Technology, India)
Copyright: 2024
Pages: 19
Source title: Innovative Machine Learning Applications for Cryptography
Source Author(s)/Editor(s): J. Anitha Ruth (SRM Institute of Science and Technology, Vadapalani, India), G.V. Mahesh Vijayalakshmi (BMS Institute of Technology and Management, India), P. Visalakshi (Department of Networking and Communications, College of Engineering and Technology, SRM Institute of Science and Technology, Katankulathur, India), R. Uma (Sri Sairam Engineering College, Chennai, India)and A. Meenakshi (SRM Institute of Science and Technology, Vadapalani, India)
DOI: 10.4018/979-8-3693-1642-9.ch012

Keywords: Artificial Intelligence / Cryptography / Engineering Science Reference / Security & Forensics

Purchase

View Enhancing Crypto Ransomware Detection Through Network Analysis and Machine Learning on the publisher's website for pricing and purchasing information.

Abstract

Crypto ransomware presents an ever-growing menace as it encrypts victim data and demands a ransom for decryption. The increasing frequency of ransomware attacks underscores the need for advanced detection techniques. A machine learning classification model is proposed to identify ransomware families. These models utilize specific network traffic features, with a particular emphasis on analyzing the user datagram protocol (UDP) and internet control message protocol (ICMP). Importantly, this approach incorporates feature selection to enhance efficiency without compromising accuracy, resulting in reduced memory usage and faster processing times. The proposed experiment utilizes various machine learning algorithms, including decision trees and random forest, to create highly accurate models for classifying ransomware families. Furthermore, the experiment combined network traffic analysis with other sophisticated methods such as behavioral analysis and honeypot deployment to effectively scale crypto ransomware detection.

The IRMA Community

Research IRM

Enhancing Crypto Ransomware Detection Through Network Analysis and Machine Learning

Purchase

Abstract

Related Content

IRMA Sponsors