Index based ransomware categorization

Abstract

A computer implemented method of identifying a ransomware algorithm, the ransomware algorithm having associated a predetermined responsive action for mitigating the effect of the ransomware algorithm in use, the method including exposing a target computer system to the ransomware algorithm, the target computer system containing a predetermined set of sample data stored therein that is encrypted by the ransomware algorithm using a searchable encryption algorithm; intercepting an index of the searchable encryption algorithm; training an autoencoder based on the index to provide a trained autoencoder adapted to identify the ransomware algorithm based on the index.

CPC Classifications