Storage-level ransomware detection with 82 lightweight IO features (entropy, LBA, transfer-size histograms) generalizes across file systems, volume states, and encryption only when trained on representative configurations, outperforming the prior Hirano feature set by up to 12.8% median F1.
Malware dynamic analysis evasion techniques: A survey
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CR 1years
2024 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
On the Generalizability of Machine Learning-based Ransomware Detection in Block Storage
Storage-level ransomware detection with 82 lightweight IO features (entropy, LBA, transfer-size histograms) generalizes across file systems, volume states, and encryption only when trained on representative configurations, outperforming the prior Hirano feature set by up to 12.8% median F1.