Leveraging Machine Learning Techniques for Windows Ransomware Network Traffic Detection

07/27/2018
by   Omar M. K. Alhawi, et al.
0

Ransomware has become a significant global threat with the ransomware-as-a-service model enabling easy availability and deployment, and the potential for high revenues creating a viable criminal business model. Individuals, private companies or public service providers e.g. healthcare or utilities companies can all become victims of ransomware attacks and consequently suffer severe disruption and financial loss. Although machine learning algorithms are already being used to detect ransomware, variants are being developed to specifically evade detection when using dynamic machine learning techniques. In this paper, we introduce NetConverse, a machine learning analysis of Windows ransomware network traffic to achieve a high, consistent detection rate. Using a dataset created from conversation-based network traffic features we achieved a true positive detection rate of 97.1 using the Decision Tree (J48) classifier.

READ FULL TEXT

page 1

page 2

page 3

page 4

research
01/16/2020

Attack based DoS attack detection using multiple classifier

One of the most common internet attacks causing significant economic los...
research
09/19/2020

Early detection of the advanced persistent threat attack using performance analysis of deep learning

One of the most common and important destructive attacks on the victim s...
research
12/15/2021

Solving the Data Sparsity Problem in Predicting the Success of the Startups with Machine Learning Methods

Predicting the success of startup companies is of great importance for b...
research
01/25/2022

ML-based tunnel detection and tunneled application classification

Encrypted tunneling protocols are widely used. Beyond business and perso...
research
10/25/2020

Machine Learning Based Network Coverage Guidance System

With the advent of 4G, there has been a huge consumption of data and the...
research
05/30/2023

Majority Voting Approach to Ransomware Detection

Crypto-ransomware remains a significant threat to governments and compan...

Please sign up or login with your details

Forgot password? Click here to reset