Scholarlink

Cybercrime is projected to cause over $10 trillion in damages through 2025 and ransomware has increasingly become the weapon of choice for cyber criminals. While hardware performance counters (HPCs) offer promising low-level insights for identifying ransomware behavior, concerns remain about their effectiveness in real-world settings. This work introduces a visualization tool that correlates HPC event data with ransomware execution to identify the most informative counters. Initial testing performed on a real-world dataset collected in a non-virtualized environment demonstrates the tool’s potential to enhance early detection and address key concerns surrounding the practical use of HPCs for security applications.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Poster: Building Confidence in Hardware-Based Ransomware Detection Through Hardware Performance Counter Event Correlation

  • 会议论文

  • 发表日期：

    2025年

查看全文
  • Ryan Binder,
  • Joshua Byun,
  • Dane Brown,
  • T. Owens Walker,
  • Jennie E. Hill

摘要

Cybercrime is projected to cause over $10 trillion in damages through 2025 and ransomware has increasingly become the weapon of choice for cyber criminals. While hardware performance counters (HPCs) offer promising low-level insights for identifying ransomware behavior, concerns remain about their effectiveness in real-world settings. This work introduces a visualization tool that correlates HPC event data with ransomware execution to identify the most informative counters. Initial testing performed on a real-world dataset collected in a non-virtualized environment demonstrates the tool’s potential to enhance early detection and address key concerns surrounding the practical use of HPCs for security applications.