勒索软件中的透共享:绕过加密操作的基于透的检测
Jiseok Bang1, Jeong Nyeo Kim2, Seungkwang Lee1
1Department of Cyber Security, Dankook University, Yongin 16890, Republic of Korea.
Sensors (Basel, Switzerland)
|March 13, 2024
概括
一种新的"共享"技术有效地绕过了依赖于识别高块的勒索软件检测系统. 这种轻量级的方法掩盖了加密数据,使得勒索软件更难以通过常规手段检测.
科学领域:
- 网络安全 网络安全
- 密码学 密码学 密码学 密码学
- 恶意软件分析 恶意软件分析
背景情况:
- 勒索软件检测通常依赖于识别加密的高区块特征.
- 绕过基于的检测现有的方法有局限性或高计算成本.
研究的目的:
- 引入一种名为"共享"的新概念,以克服当前勒索软件检测和中和技术的局限性.
- 开发一种方法可以掩盖高积块,使它们无法被标准系统检测.
主要方法:
- 提出了一种适用于所有加密算法的新"共享"技术.
- 实施的轻量化操作用于掩盖高积块.
- 确保了该方法在不了解股票订单的情况下对简单的取消的弹性.
主要成果:
- 证明"共享"有效绕过传统的基于的勒索软件检测系统.
- 拟议的方法掩盖了高积块,使其无法检测到.
- 该技术与使用轻量级操作的加密算法集成.
结论:
- "共享"为逃避当前勒索软件检测机制提供了一个强大的解决方案.
- 使用这种方法的勒索软件由于其低可检测性而构成重大威胁.
- 对先进的,无法检测到的勒索软件攻击载体进行进一步的研究是有必要的.
相关概念视频
Leaky Scanning
5.1K
During most eukaryotic translation processes, the small 40S ribosome subunit scans an mRNA from its 5' end until it encounters the first start AUG codon. The large 60S ribosomal subunit then joins the smaller one to initiate protein synthesis. The location of the translation initiation is largely determined by the nucleotides near the start codon as there may be multiple translation initiation sites present on the mRNA. Marilyn Kozak discovered that the sequence RCCAUGG (where R...
5.1K
Viral Mutations
32.3K
A mutation is a change in the sequence of bases of DNA or RNA in a genome. Some mutations occur during replication of the genome due to errors made by the polymerase enzymes that replicate DNA or RNA. Unlike DNA polymerase, RNA polymerase is prone to errors because it is not capable of “proofreading” its work. Viruses with RNA-based genomes, like HIV, therefore accrue mutations faster than viruses with DNA-based genomes. Because mutation and recombination provide the raw material...
32.3K


