About this document
Early Crypto-Ransomware Detection Algorithm by jimi is a document available to read on EtoBox.
The document discusses an early detection algorithm called PEDA that can detect crypto-ransomware before encryption occurs. PEDA provides two levels of detection: 1) Signature comparison to known ransomware signatures, and 2) A learning algorithm that detects ransomware based on pre-encryption application programming interface calls with 100% recall. The research also identified 14 important APIs that can differentiate ransomware from legitimate software.
- Author
- jimi
- Language
- EN