 |
Finally, Summary and future works. This study used open source endpoint detection and response tools to build and test a framework environment that enables systematic ransomware detection at the network and system level. Experimental results demonstrate that the use of EDR tools can quickly extract ransomware attack features and respond to attacks.
In future work, the efficiency of the EDR tool will be compared by measuring the accuracy and speed with which EDR detects ransomware when EDR is deployed to large clients. We plan to experiment with the evaluation of ransomware detection speed and accuracy by changing the conditions of the ransomware detection method, such as increasing the number of clients or monitoring systems, or changing the size of the target memory space.
|
IEEE/ICACT20210191 Slide.14
[Big Slide]