Cited 0 time in webofscience Cited 2 time in scopus

RansomBlocker: A low-overhead ransomware-proof SSD

Title
RansomBlocker: A low-overhead ransomware-proof SSD
Authors
Park, JisungJung, YoungdonWon, JonghoonKang, MinjiLee, SungjinKim, Jihong
DGIST Authors
Lee, Sungjin
Issue Date
2019-06-04
Citation
Design Automation Conference
Type
Conference
ISBN
9781450367257
ISSN
0738-100X
Abstract
We present a low-overhead ransomware-proof SSD, called RansomBlocker (RBlocker). RBlocker provides 100% full protections against all possible ransomware attacks by delaying every data deletion until no attack is guaranteed. To reduce storage overheads of the delayed deletion, RBlocker employs a time-out based backup policy. Based on the fact that ransomware must store encrypted version of target files, early deletions of obsolete data are allowed if no encrypted write was detected for a short interval. Otherwise, RBlocker keeps the data for an interval long enough to guarantee no attack condition. For an accurate in-line detection of encrypted writes, we leverages entropy- and CNN-based detectors in an integrated fashion. Our experimental results show that RBlocker can defend all types of ransomware attacks with negligible overheads. © 2019 Association for Computing Machinery.
URI
http://hdl.handle.net/20.500.11750/10107
DOI
10.1145/3316781.3317889
Publisher
Institute of Electrical and Electronics Engineers Inc.
Related Researcher
  • Author Lee, Sungjin Data-Intensive Computing Systems Laboratory
  • Research Interests Computer System, System Software, Storage System, Non-volatile Memory, Flash-based SSD, Distributed Storage Systems
Files:
There are no files associated with this item.
Collection:
Department of Information and Communication EngineeringData-Intensive Computing Systems Laboratory2. Conference Papers


qrcode mendeley

Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.

BROWSE