{"id":"https://openalex.org/W4389779302","doi":"https://doi.org/10.1109/dsc61021.2023.10354186","title":"Detection of Ransomware Attack Using Deep Learning","display_name":"Detection of Ransomware Attack Using Deep Learning","publication_year":2023,"publication_date":"2023-11-07","ids":{"openalex":"https://openalex.org/W4389779302","doi":"https://doi.org/10.1109/dsc61021.2023.10354186"},"language":"en","primary_location":{"id":"doi:10.1109/dsc61021.2023.10354186","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dsc61021.2023.10354186","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Conference on Dependable and Secure Computing (DSC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5093504264","display_name":"Muna Jemal","orcid":null},"institutions":[{"id":"https://openalex.org/I172980758","display_name":"Kennesaw State University","ror":"https://ror.org/00jeqjx33","country_code":"US","type":"education","lineage":["https://openalex.org/I172980758"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Muna Jemal","raw_affiliation_strings":["Kennesaw State University,Department of Computer Science,Marietta,GA,USA","Department of Computer Science, Kennesaw State University, Marietta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kennesaw State University,Department of Computer Science,Marietta,GA,USA","institution_ids":["https://openalex.org/I172980758"]},{"raw_affiliation_string":"Department of Computer Science, Kennesaw State University, Marietta, GA, USA","institution_ids":["https://openalex.org/I172980758"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085923839","display_name":"Dan Lo","orcid":"https://orcid.org/0000-0003-4396-0370"},"institutions":[{"id":"https://openalex.org/I172980758","display_name":"Kennesaw State University","ror":"https://ror.org/00jeqjx33","country_code":"US","type":"education","lineage":["https://openalex.org/I172980758"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dan Chia-Tien Lo","raw_affiliation_strings":["Kennesaw State University,Department of Computer Science,Marietta,GA,USA","Department of Computer Science, Kennesaw State University, Marietta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kennesaw State University,Department of Computer Science,Marietta,GA,USA","institution_ids":["https://openalex.org/I172980758"]},{"raw_affiliation_string":"Department of Computer Science, Kennesaw State University, Marietta, GA, USA","institution_ids":["https://openalex.org/I172980758"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I172980758"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9907000064849854,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.9701724052429199},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.762516438961029},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7047690749168396},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5327116847038269},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5129191875457764},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.504210352897644},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.4993269443511963},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.48667246103286743},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.47760009765625},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.43111518025398254},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4303142726421356},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.4262252748012543},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.212154358625412},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.17954036593437195}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.9701724052429199},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.762516438961029},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7047690749168396},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5327116847038269},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5129191875457764},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.504210352897644},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.4993269443511963},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48667246103286743},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.47760009765625},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.43111518025398254},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4303142726421356},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.4262252748012543},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.212154358625412},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.17954036593437195}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/dsc61021.2023.10354186","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dsc61021.2023.10354186","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Conference on Dependable and Secure Computing (DSC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.75,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W2101234009","https://openalex.org/W2614042168","https://openalex.org/W2776078261","https://openalex.org/W2787744061","https://openalex.org/W2799908179","https://openalex.org/W2800911105","https://openalex.org/W2887506070","https://openalex.org/W2893176864","https://openalex.org/W2898664598","https://openalex.org/W2909198470","https://openalex.org/W2974072230","https://openalex.org/W2980720901","https://openalex.org/W2982355322","https://openalex.org/W3007075806","https://openalex.org/W3032258369","https://openalex.org/W3040422908","https://openalex.org/W3085550466","https://openalex.org/W3091730061","https://openalex.org/W3099702369","https://openalex.org/W3109252399","https://openalex.org/W3110432551","https://openalex.org/W3129851363","https://openalex.org/W3161733511","https://openalex.org/W3202592743","https://openalex.org/W3209947356","https://openalex.org/W4200569302","https://openalex.org/W4214733430","https://openalex.org/W4214744072","https://openalex.org/W4241081041","https://openalex.org/W4281853358","https://openalex.org/W4285295354","https://openalex.org/W4288760578","https://openalex.org/W4293742266","https://openalex.org/W6675354045","https://openalex.org/W6729193369","https://openalex.org/W6737892506","https://openalex.org/W6748263364"],"related_works":["https://openalex.org/W3201228709","https://openalex.org/W2922354075","https://openalex.org/W4389157351","https://openalex.org/W4253977752","https://openalex.org/W2964829536","https://openalex.org/W3120595989","https://openalex.org/W4232561318","https://openalex.org/W2904586340","https://openalex.org/W2942879794","https://openalex.org/W3214090987"],"abstract_inverted_index":{"The":[0,104,124,149,169,211],"number":[1],"one":[2],"threat":[3],"to":[4,58,96],"the":[5,9,29,45,49,86,110,161],"digital":[6],"world":[7],"is":[8,16,34,71,82],"exponential":[10],"increase":[11],"in":[12,48,109,178,231],"ransomware":[13,69,80,98,150,158,220,234],"attacks.":[14],"Ransomware":[15],"malware":[17],"that":[18],"prevents":[19],"victims":[20],"from":[21,62,101,155,173,187],"accessing":[22],"their":[23],"resources":[24],"by":[25],"locking":[26],"or":[27],"encrypting":[28],"data":[30],"until":[31],"a":[32,64,93,131,179,206],"ransom":[33],"paid.":[35],"With":[36],"individuals":[37],"and":[38,44,119,145,201,226,235],"businesses":[39],"growing":[40],"dependencies":[41],"on":[42],"technology":[43],"Internet,":[46],"researchers":[47],"cyber":[50],"security":[51],"field":[52],"are":[53,113,128,216],"looking":[54],"for":[55],"different":[56,157],"measures":[57],"prevent":[59],"malicious":[60],"attackers":[61],"having":[63],"successful":[65],"campaign.":[66],"A":[67,190],"new":[68],"variant":[70],"being":[72,199],"introduced":[73],"daily,":[74],"thus":[75],"behavior-based":[76],"analysis":[77],"of":[78,163,208],"detecting":[79],"attacks":[81],"more":[83],"effective":[84],"than":[85],"traditional":[87],"static":[88],"analysis.":[89],"This":[90],"paper":[91],"proposes":[92],"multi-variant":[94],"classification":[95],"detect":[97],"I/O":[99,193],"operations":[100,194],"benign":[102,170,236],"applications.":[103],"deep":[105,125,213],"learning":[106,126,134,214],"models":[107,127,215],"implemented":[108],"proposed":[111,212],"approach":[112],"Bi-directional":[114],"Long":[115],"Short-Term":[116],"Memory":[117],"(Bi-LSTM)":[118],"Convolutional":[120],"Neural":[121],"Networks":[122],"(CNN).":[123],"compared":[129],"against":[130],"classic":[132],"machine":[133],"model":[135],"such":[136],"as":[137,222],"Logistic":[138],"Regression":[139],"(LR),":[140],"Support":[141],"Vector":[142],"Machine":[143],"(SVM),":[144],"Random":[146],"Forest":[147],"(RF).":[148],"samples":[151,171,221],"contain":[152],"70":[153],"binaries":[154],"30":[156],"extracted":[159],"during":[160],"encryption":[162],"an":[164],"extensive":[165],"network":[166,174],"shared":[167,188],"directory.":[168],"came":[172],"traffic":[175],"traces":[176],"recorded":[177],"campus":[180],"LAN":[181],"where":[182],"staff":[183],"users":[184],"access":[185],"files":[186],"servers.":[189],"sample":[191],"contains":[192],"(short":[195],"Control":[196],"Commands,":[197],"bytes":[198],"read,":[200],"written)":[202],"per":[203],"second":[204],"over":[205],"period":[207],"T":[209],"seconds.":[210],"tested":[217],"with":[218],"Zero-day":[219],"well.":[223],"Both":[224],"Bi-LSTM":[225],"CNN":[227],"achieved":[228],"above":[229],"98%":[230],"accurately":[232],"classifying":[233],"samples.":[237]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}