Next-Generation Ransomware Defense: High-Performance Computing Strategies for Monitoring Disk I/O and CPU Performance
Year: 2024
Type: article
Abstract: Ransomware frequently bypasses antivirus tools, encrypting files and making data inaccessible. Traditional detection methods, which involve monitoring processes, system calls, and file activities, have high overhead and can be disrupted by sophisticated ransomware. This Researchintroduces a method for detecting ransomware on a virtual machine by collecting specific processor and disk I/O event data from the host machine and using a machine learning classifier. The random forest model excelled among seven classifiers, achieving 0.98 accuracy within 400 milliseconds across various user loads and 22 ransomware types. INDEX TERMS Deep learning, disk statistics, hardware performance counters, machine learning, ransomware, virtual machines.
DOI: 10.55041/ijsrem39917
Authors: Khirsagar Rishitha, Mr.Y.Manohar Reddy, D.Kundhan Rao, Manish Kumar
Language: English
Subfield: Signal Processing
Field: Computer Science
Domain: Physical Sciences
Open Access status: bronze
OpenAlex ID: W4405728294