Cited 0 time in
Cited 2 time in
RansomBlocker: A low-overhead ransomware-proof SSD
- RansomBlocker: A low-overhead ransomware-proof SSD
- Park, Jisung; Jung, Youngdon; Won, Jonghoon; Kang, Minji; Lee, Sungjin; Kim, Jihong
- DGIST Authors
- Lee, Sungjin
- Issue Date
- Design Automation Conference
- We present a low-overhead ransomware-proof SSD, called RansomBlocker (RBlocker). RBlocker provides 100% full protections against all possible ransomware attacks by delaying every data deletion until no attack is guaranteed. To reduce storage overheads of the delayed deletion, RBlocker employs a time-out based backup policy. Based on the fact that ransomware must store encrypted version of target files, early deletions of obsolete data are allowed if no encrypted write was detected for a short interval. Otherwise, RBlocker keeps the data for an interval long enough to guarantee no attack condition. For an accurate in-line detection of encrypted writes, we leverages entropy- and CNN-based detectors in an integrated fashion. Our experimental results show that RBlocker can defend all types of ransomware attacks with negligible overheads. © 2019 Association for Computing Machinery.
- Institute of Electrical and Electronics Engineers Inc.
- Related Researcher
Data-Intensive Computing Systems Laboratory
Computer System, System Software, Storage System, Non-volatile Memory, Flash-based SSD, Distributed Storage Systems
There are no files associated with this item.
- Department of Information and Communication EngineeringData-Intensive Computing Systems Laboratory2. Conference Papers
Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.