{"id":"https://openalex.org/W7116752145","doi":"https://doi.org/10.1109/access.2025.3647060","title":"CurveLock: Exploring Elliptic Curves Implementation in Modern Ransomware","display_name":"CurveLock: Exploring Elliptic Curves Implementation in Modern Ransomware","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W7116752145","doi":"https://doi.org/10.1109/access.2025.3647060"},"language":null,"primary_location":{"id":"doi:10.1109/access.2025.3647060","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3647060","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3647060","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5116481166","display_name":"Swayam Tejas Padhy","orcid":null},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Swayam Tejas Padhy","raw_affiliation_strings":["Faculty of Engineering and IT, University of Technology Sydney, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0009-0001-0800-647X","affiliations":[{"raw_affiliation_string":"Faculty of Engineering and IT, University of Technology Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5120986768","display_name":"P.B. Shanthi","orcid":null},"institutions":[{"id":"https://openalex.org/I164861460","display_name":"Manipal Academy of Higher Education","ror":"https://ror.org/02xzytt36","country_code":"IN","type":"education","lineage":["https://openalex.org/I164861460"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"P. B. Shanthi","raw_affiliation_strings":["School of Computer Engineering, Manipal Institute of Technology, Manipal Academy of Higher Education, Manipal, Karnataka, India"],"raw_orcid":"https://orcid.org/0000-0003-3276-7073","affiliations":[{"raw_affiliation_string":"School of Computer Engineering, Manipal Institute of Technology, Manipal Academy of Higher Education, Manipal, Karnataka, India","institution_ids":["https://openalex.org/I164861460"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":1.8781,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.87144739,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"13","issue":null,"first_page":"216224","last_page":"216240"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.972100019454956,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.972100019454956,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.015200000256299973,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.002099999925121665,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.8015000224113464},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.7541999816894531},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.67330002784729},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.6003000140190125},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.5480999946594238},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.48350000381469727},{"id":"https://openalex.org/keywords/elliptic-curve-cryptography","display_name":"Elliptic curve cryptography","score":0.4284999966621399},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.41929998993873596},{"id":"https://openalex.org/keywords/key-exchange","display_name":"Key exchange","score":0.4097999930381775}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.8015000224113464},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.7541999816894531},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7354000210762024},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.67330002784729},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.6003000140190125},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5899999737739563},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.5480999946594238},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.48350000381469727},{"id":"https://openalex.org/C167615521","wikidata":"https://www.wikidata.org/wiki/Q1048911","display_name":"Elliptic curve cryptography","level":4,"score":0.4284999966621399},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.41929998993873596},{"id":"https://openalex.org/C99674996","wikidata":"https://www.wikidata.org/wiki/Q1414155","display_name":"Key exchange","level":4,"score":0.4097999930381775},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.3928000032901764},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.3862000107765198},{"id":"https://openalex.org/C15927051","wikidata":"https://www.wikidata.org/wiki/Q246593","display_name":"Cryptographic primitive","level":4,"score":0.38359999656677246},{"id":"https://openalex.org/C118463975","wikidata":"https://www.wikidata.org/wiki/Q220849","display_name":"Digital signature","level":3,"score":0.3537999987602234},{"id":"https://openalex.org/C173801870","wikidata":"https://www.wikidata.org/wiki/Q201413","display_name":"Heuristic","level":2,"score":0.34459999203681946},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.33399999141693115},{"id":"https://openalex.org/C181149355","wikidata":"https://www.wikidata.org/wiki/Q897511","display_name":"Cryptanalysis","level":3,"score":0.3296000063419342},{"id":"https://openalex.org/C17886624","wikidata":"https://www.wikidata.org/wiki/Q1320561","display_name":"Key management","level":3,"score":0.31839999556541443},{"id":"https://openalex.org/C79581498","wikidata":"https://www.wikidata.org/wiki/Q1367530","display_name":"Suite","level":2,"score":0.29789999127388},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.2971999943256378},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.29190000891685486},{"id":"https://openalex.org/C3265923","wikidata":"https://www.wikidata.org/wiki/Q669129","display_name":"Arithmetic underflow","level":2,"score":0.28949999809265137},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.28630000352859497},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.27880001068115234},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.2766999900341034},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.26919999718666077},{"id":"https://openalex.org/C39217717","wikidata":"https://www.wikidata.org/wiki/Q1432354","display_name":"Hardware security module","level":3,"score":0.2581999897956848},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.25769999623298645}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/access.2025.3647060","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3647060","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3647060","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3647060","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.6381595730781555,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W1514674457","https://openalex.org/W1603220704","https://openalex.org/W2020037648","https://openalex.org/W2085068649","https://openalex.org/W2317126603","https://openalex.org/W2553476679","https://openalex.org/W2698406033","https://openalex.org/W2889044011","https://openalex.org/W2999496892","https://openalex.org/W3009492331","https://openalex.org/W3094330498","https://openalex.org/W3132588576","https://openalex.org/W4210606898","https://openalex.org/W4214919535","https://openalex.org/W4241278265","https://openalex.org/W4285357405","https://openalex.org/W4362496890","https://openalex.org/W4366447842","https://openalex.org/W4368275542","https://openalex.org/W4404136921","https://openalex.org/W4404547124","https://openalex.org/W4411086828","https://openalex.org/W4411377250","https://openalex.org/W4414747739"],"related_works":[],"abstract_inverted_index":{"The":[0],"escalating":[1],"threat":[2],"of":[3,13,54,120,145],"ransomware":[4,45,187],"to":[5,91,122,149],"global":[6],"digital":[7],"infrastructure":[8],"necessitates":[9],"a":[10,42,69,79,134],"rigorous":[11],"examination":[12],"emerging":[14],"evasion":[15,161],"techniques":[16],"and":[17,60,89,153,168,181],"cryptographic":[18,52,111],"agility.":[19],"As":[20],"Ransomware-as-a-Service":[21],"(RaaS)":[22],"proliferates,":[23],"enabling":[24],"sophisticated":[25],"campaigns":[26],"by":[27,158],"low-skilled":[28],"actors,":[29],"the":[30,51,117,142,175],"need":[31],"for":[32,97],"advanced":[33],"defensive":[34],"paradigms":[35],"becomes":[36],"critical.":[37],"This":[38,101],"study":[39],"introduces":[40],"CurveLock,":[41],"novel":[43],"proof-of-concept":[44],"framework":[46],"that":[47,65],"fundamentally":[48],"diverges":[49],"from":[50],"architectures":[53],"prevailing":[55],"families":[56],"such":[57],"as":[58],"LockBit":[59],"BlackCat.":[61],"Unlike":[62],"contemporary":[63],"threats":[64],"predominantly":[66],"rely":[67],"on":[68,125],"hybrid":[70,81],"RSA-AES":[71],"model":[72],"with":[73],"static":[74,180],"session":[75],"keys,":[76],"CurveLock":[77,129],"implements":[78],"file-centric":[80],"encryption":[82],"scheme,":[83],"utilizing":[84],"Elliptic":[85],"Curve":[86],"Cryptography":[87],"(ECC)":[88],"AES-256":[90],"generate":[92],"unique,":[93],"ephemeral":[94],"key":[95,103],"pairs":[96],"each":[98],"individual":[99],"file.":[100],"granular":[102],"management":[104],"strategy":[105],"not":[106],"only":[107],"enhances":[108],"resilience":[109],"against":[110,185],"recovery":[112],"efforts":[113],"but":[114],"also":[115],"leverages":[116],"computational":[118],"efficiency":[119],"ECC":[121],"optimize":[123],"performance":[124],"resource-constrained":[126],"targets.":[127],"Furthermore,":[128],"advances":[130],"payload":[131],"obfuscation":[132],"through":[133],"steganographic":[135],"delivery":[136],"mechanism,":[137],"embedding":[138],"encrypted":[139],"shellcode":[140],"within":[141],"IDAT":[143],"chunks":[144],"benign":[146],"PNG":[147],"images":[148],"maintain":[150],"low":[151],"entropy":[152],"circumvent":[154],"heuristic":[155],"detection.":[156],"Complemented":[157],"an":[159],"integrated":[160],"suite":[162],"including":[163],"NTDLL":[164],"unhooking,":[165],"API":[166],"hammering,":[167],"compile-time":[169],"IAT":[170],"camouflage,":[171],"this":[172],"research":[173],"demonstrates":[174],"security":[176],"gaps":[177],"in":[178],"current":[179],"behavioral":[182],"analysis":[183],"methodologies":[184],"next-generation":[186],"threats.":[188]},"counts_by_year":[{"year":2026,"cited_by_count":3}],"updated_date":"2026-07-31T08:31:51.225901","created_date":"2025-12-22T00:00:00"}