IEEE/ICACT20210191 Slide.13        [Big Slide]       Oral Presentation
This is the conclusion of the study. Cyberattack detection is an essential component of incident response. In this study, we tested whether three types of EDR tools can detect file changes caused by ransomware. Using representative EDR tools, GRR, osquery, and OSSEC, we detected that all files in the /testt directory were encrypted and displayed the results in the form of a notification or log. Through such open source-based threat detection, you can understand when an attack occurred and analyze the attack method.

[Go to Next Slide]
Select Voice: