{"id":"https://openalex.org/W3008300537","doi":"https://doi.org/10.1016/s1353-4858(20)30020-9","title":"Dissecting .NET ransomware: key generation, encryption and operation","display_name":"Dissecting .NET ransomware: key generation, encryption and operation","publication_year":2020,"publication_date":"2020-02-01","ids":{"openalex":"https://openalex.org/W3008300537","doi":"https://doi.org/10.1016/s1353-4858(20)30020-9","mag":"3008300537"},"language":"en","primary_location":{"id":"doi:10.1016/s1353-4858(20)30020-9","is_oa":false,"landing_page_url":"https://doi.org/10.1016/s1353-4858(20)30020-9","pdf_url":null,"source":{"id":"https://openalex.org/S2764863393","display_name":"Network Security","issn_l":"1353-4858","issn":["1353-4858","1872-9371"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Network Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049640604","display_name":"Pranshu Bajpai","orcid":"https://orcid.org/0000-0003-4662-4049"},"institutions":[{"id":"https://openalex.org/I87216513","display_name":"Michigan State University","ror":"https://ror.org/05hs6h993","country_code":"US","type":"education","lineage":["https://openalex.org/I87216513"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Pranshu Bajpai","raw_affiliation_strings":["Michigan State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Michigan State University","institution_ids":["https://openalex.org/I87216513"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5036446758","display_name":"Richard Enbody","orcid":"https://orcid.org/0000-0002-2415-5651"},"institutions":[{"id":"https://openalex.org/I87216513","display_name":"Michigan State University","ror":"https://ror.org/05hs6h993","country_code":"US","type":"education","lineage":["https://openalex.org/I87216513"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Richard Enbody","raw_affiliation_strings":["Michigan State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Michigan State University","institution_ids":["https://openalex.org/I87216513"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I87216513"],"apc_list":null,"apc_paid":null,"fwci":2.0787,"has_fulltext":false,"cited_by_count":17,"citation_normalized_percentile":{"value":0.87324892,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":"2020","issue":"2","first_page":"8","last_page":"14"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.9832464456558228},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6156668066978455},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5468627214431763},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4991037845611572},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4481755495071411},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.4355488717556},{"id":"https://openalex.org/keywords/cryptosystem","display_name":"Cryptosystem","score":0.43404871225357056},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.2827434241771698}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.9832464456558228},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6156668066978455},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5468627214431763},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4991037845611572},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4481755495071411},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.4355488717556},{"id":"https://openalex.org/C6295992","wikidata":"https://www.wikidata.org/wiki/Q976521","display_name":"Cryptosystem","level":3,"score":0.43404871225357056},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.2827434241771698}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/s1353-4858(20)30020-9","is_oa":false,"landing_page_url":"https://doi.org/10.1016/s1353-4858(20)30020-9","pdf_url":null,"source":{"id":"https://openalex.org/S2764863393","display_name":"Network Security","issn_l":"1353-4858","issn":["1353-4858","1872-9371"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Network Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.41999998688697815,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":3,"referenced_works":["https://openalex.org/W2074224700","https://openalex.org/W2808131992","https://openalex.org/W4245775190"],"related_works":["https://openalex.org/W3201228709","https://openalex.org/W2922354075","https://openalex.org/W4389157351","https://openalex.org/W4253977752","https://openalex.org/W2964829536","https://openalex.org/W3120595989","https://openalex.org/W4232561318","https://openalex.org/W2965484163","https://openalex.org/W4232705780","https://openalex.org/W2096221836"],"abstract_inverted_index":{"The":[0,102,116,174],"threat":[1,103],"of":[2,35,48,90,104,143,156,170,181],"ransomware":[3,9,37,50,56,76,91,100,105,111,145,158,164,182,191],"is":[4,106],"ever":[5],"growing.":[6],"Not":[7],"all":[8,87,110,179],"types":[10,112],"are":[11,20,113,121],"created":[12,114],"equal":[13],"and":[14,38,45,59,92,128,146,153,167,183],"the":[15,49,65,78,82,157,168],"cryptosystems":[16,117],"in":[17,118],"some":[18,119],"forms":[19,89,120,180],"more":[21,98,122,189],"virulent":[22,123],"than":[23,124],"others.":[24,125],"This":[25],"article":[26],"dissects":[27],"eight":[28,136],"real-world":[29,137],"variants":[30,138],"belonging":[31,139],"to":[32,86,140,178],"different":[33,141],"families":[34,142],".NET":[36,75,144],"provides":[39],"insights":[40,148],"into":[41,149],"key":[42,150],"generation,":[43,151],"encryption":[44,152],"other":[46,154],"aspects":[47,155],"kill":[51,159],"chain.":[52,160],"We":[53],"also":[54,162],"summarise":[55,163],"execution":[57,165],"flow":[58,166],"dynamic":[60,171],"library":[61,172],"calls":[62],"based":[63],"on":[64],"collected":[66],"evidence.":[67],"While":[68],"this":[69],"analysis":[70],"was":[71],"carried":[72],"out":[73],"using":[74],"samples,":[77],"lessons":[79,175],"learned":[80,176],"from":[81],"empirical":[83],"evidence":[84],"apply":[85,177],"modern":[88],"can":[93,184],"be":[94,185],"used":[95,186],"for":[96,187],"building":[97,188],"effective":[99,190],"solutions.":[101,192],"ever-growing,":[107],"but":[108],"not":[109],"equal.":[115],"Pranshu":[126],"Bajpai":[127],"Richard":[129],"Enbody":[130],"at":[131],"Michigan":[132],"State":[133],"University":[134],"dissect":[135],"provide":[147],"They":[161],"use":[169],"calls.":[173]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":3}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}