Detecting and preventing ransomware poses different intellectual and practical challenges compared to other forms of malware, but its distinctive behavioral traits also offer opportunities to develop new mitigation techniques.
Anti-ransomware methods are therefore a hot topic, with many researchers exploring different approaches.
- But what are these methods and how do they work?
- Are there new methods we could try?
- Can we give the initiative back to the defender in the arms race between attack and defense?
In this webcast, I'll answer these questions and more. First, I'll present a detailed technical overview of current research across several categories, including filesystem interactions, API calls, ransom notes, and network activity, exploring their advantages and disadvantages.
I'll then show five new methods for ransomware detection and prevention - including deception, countermeasures, and statistical analyses of ransomware and attacker behaviors - and I'll conclude by outlining some possibilities for future research.