{"id":"https://openalex.org/W4409049659","doi":"https://doi.org/10.1109/access.2025.3556187","title":"A Survey of Ransomware Detection Methods","display_name":"A Survey of Ransomware Detection Methods","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4409049659","doi":"https://doi.org/10.1109/access.2025.3556187"},"language":"en","primary_location":{"id":"doi:10.1109/access.2025.3556187","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3556187","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3556187","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101498344","display_name":"Saleh Alzahrani","orcid":"https://orcid.org/0000-0001-8380-2487"},"institutions":[{"id":"https://openalex.org/I17301866","display_name":"University of Alabama","ror":"https://ror.org/03xrrjk67","country_code":"US","type":"education","lineage":["https://openalex.org/I17301866"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Saleh Alzahrani","raw_affiliation_strings":["Department of Computer Science, The University of Alabama, Tuscaloosa, AL, USA"],"raw_orcid":"https://orcid.org/0000-0001-8380-2487","affiliations":[{"raw_affiliation_string":"Department of Computer Science, The University of Alabama, Tuscaloosa, AL, USA","institution_ids":["https://openalex.org/I17301866"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046618429","display_name":"Yang Xiao","orcid":"https://orcid.org/0000-0001-8549-6794"},"institutions":[{"id":"https://openalex.org/I17301866","display_name":"University of Alabama","ror":"https://ror.org/03xrrjk67","country_code":"US","type":"education","lineage":["https://openalex.org/I17301866"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yang Xiao","raw_affiliation_strings":["Department of Computer Science, The University of Alabama, Tuscaloosa, AL, USA"],"raw_orcid":"https://orcid.org/0000-0001-8549-6794","affiliations":[{"raw_affiliation_string":"Department of Computer Science, The University of Alabama, Tuscaloosa, AL, USA","institution_ids":["https://openalex.org/I17301866"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015182224","display_name":"Sultan Asiri","orcid":"https://orcid.org/0000-0002-7405-7646"},"institutions":[{"id":"https://openalex.org/I82952536","display_name":"King Khalid University","ror":"https://ror.org/052kwzs30","country_code":"SA","type":"education","lineage":["https://openalex.org/I82952536"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Sultan Asiri","raw_affiliation_strings":["Department of Computer Science, Applied College, King Khalid University, Muhayil, Saudi Arabia","Department of Computer Science, Applied College, King Khalid University, Muhayil Aseer, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-7405-7646","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Applied College, King Khalid University, Muhayil, Saudi Arabia","institution_ids":["https://openalex.org/I82952536"]},{"raw_affiliation_string":"Department of Computer Science, Applied College, King Khalid University, Muhayil Aseer, Saudi Arabia","institution_ids":["https://openalex.org/I82952536"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020430058","display_name":"Jianying Zheng","orcid":"https://orcid.org/0000-0002-3902-8495"},"institutions":[{"id":"https://openalex.org/I308837","display_name":"Suzhou University of Science and Technology","ror":"https://ror.org/04en8wb91","country_code":"CN","type":"education","lineage":["https://openalex.org/I308837"]},{"id":"https://openalex.org/I4403386725","display_name":"Suzhou City University","ror":"https://ror.org/025jsyk19","country_code":null,"type":"education","lineage":["https://openalex.org/I4403386725"]},{"id":"https://openalex.org/I6469544","display_name":"City University of Macau","ror":"https://ror.org/04gpd4q15","country_code":"MO","type":"education","lineage":["https://openalex.org/I6469544"]}],"countries":["CN","MO"],"is_corresponding":false,"raw_author_name":"Jianying Zheng","raw_affiliation_strings":["School of Intelligent Manufacturing and Smart Transportation, Suzhou City University, Suzhou, China","School of Intelligent Manufacturing and Smart Transportation, Suzhou City University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Intelligent Manufacturing and Smart Transportation, Suzhou City University, Suzhou, China","institution_ids":["https://openalex.org/I308837","https://openalex.org/I4403386725"]},{"raw_affiliation_string":"School of Intelligent Manufacturing and Smart Transportation, Suzhou City University, China","institution_ids":["https://openalex.org/I6469544","https://openalex.org/I4403386725"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5025349097","display_name":"Tieshan Li","orcid":"https://orcid.org/0000-0003-0474-953X"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tieshan Li","raw_affiliation_strings":["School of Automation Engineering, University of Electronic Science and Technology of China, Chengdu, China","The School of Automation Engineering, University of Electronic Science and Technology of China, Chengdu, China"],"raw_orcid":"https://orcid.org/0000-0003-0474-953X","affiliations":[{"raw_affiliation_string":"School of Automation Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]},{"raw_affiliation_string":"The School of Automation Engineering, University of Electronic Science and Technology of China, Chengdu, China","institution_ids":["https://openalex.org/I150229711"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5101498344"],"corresponding_institution_ids":["https://openalex.org/I17301866"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":20.9301,"has_fulltext":false,"cited_by_count":18,"citation_normalized_percentile":{"value":0.99606982,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":"13","issue":null,"first_page":"57943","last_page":"57982"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.7464513778686523},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6544603109359741},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3399795591831207},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.30495479702949524}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.7464513778686523},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6544603109359741},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3399795591831207},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.30495479702949524}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2025.3556187","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3556187","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:655bae4ce3c4475d9e4fa3f3471db122","is_oa":true,"landing_page_url":"https://doaj.org/article/655bae4ce3c4475d9e4fa3f3471db122","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 13, Pp 57943-57982 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3556187","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3556187","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":161,"referenced_works":["https://openalex.org/W89309601","https://openalex.org/W1578351389","https://openalex.org/W1963545232","https://openalex.org/W1967185446","https://openalex.org/W1997833177","https://openalex.org/W2016793475","https://openalex.org/W2079558195","https://openalex.org/W2120014639","https://openalex.org/W2132874238","https://openalex.org/W2135942078","https://openalex.org/W2140564944","https://openalex.org/W2146950091","https://openalex.org/W2296579688","https://openalex.org/W2410123299","https://openalex.org/W2493960021","https://openalex.org/W2513529237","https://openalex.org/W2552218842","https://openalex.org/W2559964890","https://openalex.org/W2568857984","https://openalex.org/W2756520489","https://openalex.org/W2773511604","https://openalex.org/W2780577826","https://openalex.org/W2790850061","https://openalex.org/W2884820571","https://openalex.org/W2885355851","https://openalex.org/W2894211014","https://openalex.org/W2928980918","https://openalex.org/W2950754826","https://openalex.org/W2963604227","https://openalex.org/W3003433587","https://openalex.org/W3009492331","https://openalex.org/W3067193527","https://openalex.org/W3081627837","https://openalex.org/W3082603384","https://openalex.org/W3093577626","https://openalex.org/W3093593591","https://openalex.org/W3099702369","https://openalex.org/W3118888569","https://openalex.org/W3132588576","https://openalex.org/W3133183011","https://openalex.org/W3139187101","https://openalex.org/W3145971023","https://openalex.org/W3153302004","https://openalex.org/W3155839992","https://openalex.org/W3161733511","https://openalex.org/W3169092194","https://openalex.org/W3174684718","https://openalex.org/W3183350623","https://openalex.org/W4200030734","https://openalex.org/W4200569302","https://openalex.org/W4205839607","https://openalex.org/W4206830000","https://openalex.org/W4214744072","https://openalex.org/W4214919535","https://openalex.org/W4224110334","https://openalex.org/W4225768045","https://openalex.org/W4226504147","https://openalex.org/W4234005615","https://openalex.org/W4237332204","https://openalex.org/W4247359328","https://openalex.org/W4248806346","https://openalex.org/W4256086451","https://openalex.org/W4283371515","https://openalex.org/W4285295354","https://openalex.org/W4293335073","https://openalex.org/W4296438248","https://openalex.org/W4296994884","https://openalex.org/W4306786778","https://openalex.org/W4313326218","https://openalex.org/W4313477864","https://openalex.org/W4316690373","https://openalex.org/W4318337972","https://openalex.org/W4319996419","https://openalex.org/W4323363627","https://openalex.org/W4362513469","https://openalex.org/W4366265333","https://openalex.org/W4366447842","https://openalex.org/W4366772369","https://openalex.org/W4376630236","https://openalex.org/W4378071190","https://openalex.org/W4379879883","https://openalex.org/W4380303285","https://openalex.org/W4380990032","https://openalex.org/W4382814888","https://openalex.org/W4383981974","https://openalex.org/W4385384870","https://openalex.org/W4385633412","https://openalex.org/W4385872253","https://openalex.org/W4386074205","https://openalex.org/W4386184229","https://openalex.org/W4386430964","https://openalex.org/W4386838013","https://openalex.org/W4386952794","https://openalex.org/W4386988695","https://openalex.org/W4387614417","https://openalex.org/W4388198432","https://openalex.org/W4388398530","https://openalex.org/W4390772607","https://openalex.org/W4390818143","https://openalex.org/W4391399751","https://openalex.org/W4391595261","https://openalex.org/W4391697144","https://openalex.org/W4391896876","https://openalex.org/W4392359842","https://openalex.org/W4392647473","https://openalex.org/W4392698190","https://openalex.org/W4393035841","https://openalex.org/W4393127076","https://openalex.org/W4393352780","https://openalex.org/W4394741713","https://openalex.org/W4394893882","https://openalex.org/W4395012225","https://openalex.org/W4395049932","https://openalex.org/W4395470964","https://openalex.org/W4395703516","https://openalex.org/W4396506305","https://openalex.org/W4396666545","https://openalex.org/W4396712725","https://openalex.org/W4396941516","https://openalex.org/W4399055563","https://openalex.org/W4399259116","https://openalex.org/W4399282679","https://openalex.org/W4399386664","https://openalex.org/W4399412863","https://openalex.org/W4400036463","https://openalex.org/W4400091584","https://openalex.org/W4400350332","https://openalex.org/W4401338800","https://openalex.org/W4401515386","https://openalex.org/W4401527056","https://openalex.org/W4401577803","https://openalex.org/W4401976309","https://openalex.org/W4402056280","https://openalex.org/W4402081625","https://openalex.org/W4402615287","https://openalex.org/W4402711998","https://openalex.org/W4402775759","https://openalex.org/W4402915644","https://openalex.org/W4402918477","https://openalex.org/W4403295180","https://openalex.org/W4403422123","https://openalex.org/W4403598666","https://openalex.org/W4403616047","https://openalex.org/W4403728042","https://openalex.org/W4404443074","https://openalex.org/W4404488436","https://openalex.org/W4405812804","https://openalex.org/W4406057992","https://openalex.org/W4406388019","https://openalex.org/W4406693942","https://openalex.org/W6679033275","https://openalex.org/W6729193369","https://openalex.org/W6757347276","https://openalex.org/W6775780523","https://openalex.org/W6800740177","https://openalex.org/W6804839514","https://openalex.org/W6876137248","https://openalex.org/W6887789840","https://openalex.org/W6887892303","https://openalex.org/W6907095483","https://openalex.org/W6926219747"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W3201228709","https://openalex.org/W2922354075","https://openalex.org/W4389157351","https://openalex.org/W4232561318","https://openalex.org/W3202245533","https://openalex.org/W4253977752","https://openalex.org/W2942879794"],"abstract_inverted_index":{"Ransomware":[0],"attacks":[1,21,151],"continue":[2],"to":[3,8,16,61,99],"pose":[4],"a":[5,28,35],"significant":[6],"challenge":[7],"cybersecurity,":[9],"causing":[10],"substantial":[11],"financial":[12],"and":[13,18,26,41,48,69,75,111,120,126,142,168,177],"reputational":[14],"damage":[15],"individuals":[17],"organizations.":[19],"These":[20],"typically":[22],"encrypt":[23],"user":[24],"data":[25],"demand":[27],"ransom":[29],"for":[30,38,46,90,181],"its":[31],"release.":[32],"There":[33],"is":[34],"growing":[36],"need":[37],"more":[39,183],"effective":[40],"dynamic":[42],"detection":[43,89,104,114,186],"methods,":[44,105,122],"especially":[45],"zero-day":[47],"unknown":[49],"ransomware":[50,88,103,150,185],"variants.":[51],"This":[52,96,170],"survey":[53,82,171],"focuses":[54],"on":[55,72,87,107],"ransomware-detecting":[56],"methods":[57,115],"published":[58],"from":[59],"2019":[60],"2025.":[62],"One":[63],"hundred":[64],"thirty-five":[65],"papers":[66,85],"were":[67],"reviewed":[68,163],"filtered":[70],"based":[71],"their":[73,108,166],"scope":[74],"publication":[76],"venue.":[77],"For":[78],"in-depth":[79],"analysis,":[80],"this":[81],"selected":[83],"45":[84],"focusing":[86,106],"Windows":[91],"or":[92],"Android":[93],"operating":[94],"systems.":[95,187],"paper":[97,131],"aims":[98],"comprehensively":[100],"review":[101],"existing":[102],"effectiveness,":[109],"limitations,":[110],"applicability.":[112],"The":[113,130],"are":[116],"categorized":[117],"into":[118],"machine-learning-based":[119],"non-machine-learning-based":[121],"discussing":[123],"the":[124,146,158,162],"advantages":[125],"drawbacks":[127],"of":[128,149],"each.":[129],"also":[132,156],"highlights":[133],"ransomware-as-a-service,":[134],"explaining":[135],"what":[136],"it":[137,140,144],"is,":[138],"how":[139,143],"works,":[141],"affects":[145],"increasing":[147],"number":[148],"in":[152,161,174],"recent":[153],"years.":[154],"It":[155],"studies":[157],"datasets":[159],"used":[160],"literature,":[164],"listing":[165],"structures":[167],"limitations.":[169],"identifies":[172],"gaps":[173],"current":[175],"research":[176],"suggests":[178],"future":[179],"directions":[180],"developing":[182],"robust":[184]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":1}],"updated_date":"2026-05-06T08:25:59.206177","created_date":"2025-10-10T00:00:00"}