{"id":"https://openalex.org/W4401375005","doi":"https://doi.org/10.1007/s10207-024-00892-2","title":"Early mitigation of CPU-optimized ransomware using monitoring encryption instructions","display_name":"Early mitigation of CPU-optimized ransomware using monitoring encryption instructions","publication_year":2024,"publication_date":"2024-07-30","ids":{"openalex":"https://openalex.org/W4401375005","doi":"https://doi.org/10.1007/s10207-024-00892-2"},"language":"en","primary_location":{"id":"doi:10.1007/s10207-024-00892-2","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-024-00892-2","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-024-00892-2.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10207-024-00892-2.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5091460445","display_name":"Shuhei Enomoto","orcid":null},"institutions":[{"id":"https://openalex.org/I65837984","display_name":"Kobe University","ror":"https://ror.org/03tgsfw79","country_code":"JP","type":"education","lineage":["https://openalex.org/I65837984"]}],"countries":["JP"],"is_corresponding":true,"raw_author_name":"Shuhei Enomoto","raw_affiliation_strings":["Kobe University, Kobe, Hyogo, 657-8501, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kobe University, Kobe, Hyogo, 657-8501, Japan","institution_ids":["https://openalex.org/I65837984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068194019","display_name":"Hiroki Kuzuno","orcid":"https://orcid.org/0000-0003-2686-2541"},"institutions":[{"id":"https://openalex.org/I65837984","display_name":"Kobe University","ror":"https://ror.org/03tgsfw79","country_code":"JP","type":"education","lineage":["https://openalex.org/I65837984"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Hiroki Kuzuno","raw_affiliation_strings":["Kobe University, Kobe, Hyogo, 657-8501, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kobe University, Kobe, Hyogo, 657-8501, Japan","institution_ids":["https://openalex.org/I65837984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052174385","display_name":"Hiroshi Yamada","orcid":"https://orcid.org/0000-0001-8309-1283"},"institutions":[{"id":"https://openalex.org/I92614990","display_name":"Tokyo University of Agriculture and Technology","ror":"https://ror.org/00qg0kr10","country_code":"JP","type":"education","lineage":["https://openalex.org/I92614990"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Hiroshi Yamada","raw_affiliation_strings":["Tokyo University of Agriculture and Technology, Koganei, Tokyo, 184-8588, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tokyo University of Agriculture and Technology, Koganei, Tokyo, 184-8588, Japan","institution_ids":["https://openalex.org/I92614990"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076797774","display_name":"Yoshiaki Shiraishi","orcid":"https://orcid.org/0000-0002-8970-9408"},"institutions":[{"id":"https://openalex.org/I65837984","display_name":"Kobe University","ror":"https://ror.org/03tgsfw79","country_code":"JP","type":"education","lineage":["https://openalex.org/I65837984"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Yoshiaki Shiraishi","raw_affiliation_strings":["Kobe University, Kobe, Hyogo, 657-8501, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kobe University, Kobe, Hyogo, 657-8501, Japan","institution_ids":["https://openalex.org/I65837984"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5048694461","display_name":"Masakatu Morii","orcid":null},"institutions":[{"id":"https://openalex.org/I65837984","display_name":"Kobe University","ror":"https://ror.org/03tgsfw79","country_code":"JP","type":"education","lineage":["https://openalex.org/I65837984"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Masakatu Morii","raw_affiliation_strings":["Kobe University, Kobe, Hyogo, 657-8501, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kobe University, Kobe, Hyogo, 657-8501, Japan","institution_ids":["https://openalex.org/I65837984"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5091460445"],"corresponding_institution_ids":["https://openalex.org/I65837984"],"apc_list":{"value":2590,"currency":"EUR","value_usd":3190},"apc_paid":{"value":2590,"currency":"EUR","value_usd":3190},"fwci":1.9708,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.87205182,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"23","issue":"5","first_page":"3393","last_page":"3413"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9948999881744385,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.9178974032402039},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8151150941848755},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.7118395566940308},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.54996258020401},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.5317211151123047},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.5290443301200867},{"id":"https://openalex.org/keywords/central-processing-unit","display_name":"Central processing unit","score":0.5179876089096069},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4919893443584442},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.4719390273094177},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.42448002099990845},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.4055243730545044}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.9178974032402039},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8151150941848755},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.7118395566940308},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.54996258020401},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.5317211151123047},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.5290443301200867},{"id":"https://openalex.org/C49154492","wikidata":"https://www.wikidata.org/wiki/Q5300","display_name":"Central processing unit","level":2,"score":0.5179876089096069},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4919893443584442},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.4719390273094177},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.42448002099990845},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4055243730545044}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/s10207-024-00892-2","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-024-00892-2","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-024-00892-2.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},{"id":"pmh:oai:da.lib.kobe-u.ac.jp:20.500.14094/0100491414","is_oa":true,"landing_page_url":"https://hdl.handle.net/20.500.14094/0100491414","pdf_url":"https://da.lib.kobe-u.ac.jp/da/kernel/0100491414/0100491414.pdf","source":{"id":"https://openalex.org/S4306401924","display_name":"Kobe University Repository Kernel (Kobe University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I65837984","host_organization_name":"Kobe University","host_organization_lineage":["https://openalex.org/I65837984"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"International Journal of Information Security\u300023(5), 3393-3413","raw_type":"journal article"}],"best_oa_location":{"id":"doi:10.1007/s10207-024-00892-2","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-024-00892-2","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-024-00892-2.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.5699999928474426}],"awards":[{"id":"https://openalex.org/G3723536152","display_name":null,"funder_award_id":"JPJ000254","funder_id":"https://openalex.org/F4320325628","funder_display_name":"Ministry of Internal Affairs and Communications"},{"id":"https://openalex.org/G4186272563","display_name":"Study of secure system software for attack prevention and data protection","funder_award_id":"23K16882","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"}],"funders":[{"id":"https://openalex.org/F4320325628","display_name":"Ministry of Internal Affairs and Communications","ror":"https://ror.org/00vs1pz50"},{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4401375005.pdf","grobid_xml":"https://content.openalex.org/works/W4401375005.grobid-xml"},"referenced_works_count":20,"referenced_works":["https://openalex.org/W2119359024","https://openalex.org/W2513529237","https://openalex.org/W2559964890","https://openalex.org/W2601591992","https://openalex.org/W2764249719","https://openalex.org/W2765383620","https://openalex.org/W2765713146","https://openalex.org/W2766096867","https://openalex.org/W2775582065","https://openalex.org/W2794801050","https://openalex.org/W2808706667","https://openalex.org/W2809959305","https://openalex.org/W2885096636","https://openalex.org/W2890196927","https://openalex.org/W2931650928","https://openalex.org/W2945824389","https://openalex.org/W2993999308","https://openalex.org/W3112809676","https://openalex.org/W4324093428","https://openalex.org/W4386988695"],"related_works":["https://openalex.org/W3201228709","https://openalex.org/W2922354075","https://openalex.org/W4389157351","https://openalex.org/W4232561318","https://openalex.org/W3202245533","https://openalex.org/W4253977752","https://openalex.org/W2942879794","https://openalex.org/W2964829536","https://openalex.org/W2904586340","https://openalex.org/W3120595989"],"abstract_inverted_index":{"Abstract":[0],"Ransomware":[1],"attacks":[2,126],"pose":[3],"a":[4,16],"significant":[5],"threat":[6],"to":[7,53,122],"information":[8],"systems.":[9],"Server":[10],"hosts,":[11],"including":[12],"cloud":[13],"infrastructure":[14],"as":[15,30],"service,":[17],"are":[18,58],"prime":[19],"targets":[20],"for":[21,42,65,89,140,167,209],"ransomware":[22,39,47,56,93,103,125],"developers.":[23],"To":[24,169],"address":[25],"this,":[26],"security":[27,186],"mechanisms,":[28],"such":[29],"antivirus":[31,81],"software,":[32],"have":[33],"proven":[34],"effective.":[35],"Moreover,":[36],"research":[37],"on":[38,85,127,132],"detection":[40,78,94],"advocates":[41],"behavior-based":[43],"finding":[44],"mechanisms":[45],"while":[46],"is":[48,107,119,207],"in":[49,155,179],"operation.":[50],"In":[51,92],"response":[52],"evolving":[54],"detections,":[55],"developers":[57],"now":[59],"adapting":[60],"an":[61,112],"optimized":[62],"design":[63],"tailored":[64],"CPU":[66,136],"architecture":[67],"(CPU-optimized":[68],"ransomware).":[69],"This":[70,109,147],"variant":[71],"can":[72,98,148],"rapidly":[73],"encrypt":[74],"files,":[75],"potentially":[76],"evading":[77],"by":[79,101,144,151,162],"traditional":[80],"methods":[82],"that":[83,196],"rely":[84],"fixed":[86],"time":[87],"intervals":[88],"file":[90,142,160],"scans.":[91],"research,":[95],"numerous":[96],"files":[97],"be":[99,149],"encrypted":[100],"CPU-optimized":[102,124,145,201],"until":[104],"malicious":[105],"activity":[106],"detected.":[108],"study":[110],"proposes":[111],"early":[113],"mitigation":[114],"mechanism":[115,176],"named":[116],"CryptoSniffer,":[117,174],"which":[118],"designed":[120],"specifically":[121],"counter":[123],"server":[128],"hosts.":[129],"CryptoSniffer":[130,197],"focuses":[131],"the":[133,153,164,171,175,180,204],"misuse":[134],"of":[135,173],"architecture-specific":[137],"encryption":[138,143,161],"instructions":[139],"swift":[141],"ransomware.":[146],"achieved":[150],"capturing":[152],"ciphertext":[154],"user":[156],"processes":[157],"and":[158,184,187,203],"thwarting":[159],"scrutinizing":[163],"content":[165],"intended":[166],"writing.":[168],"demonstrate":[170,195],"efficacy":[172],"was":[177],"implemented":[178],"latest":[181],"Linux":[182],"kernel,":[183],"its":[185],"performance":[188,205],"were":[189],"systematically":[190],"evaluated.":[191],"The":[192],"experimental":[193],"results":[194],"successfully":[198],"prevents":[199],"real-world":[200],"ransomware,":[202],"overhead":[206],"well-suited":[208],"practical":[210],"applications.":[211]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}