{"id":"https://openalex.org/W7160238021","doi":"https://doi.org/10.1109/ojcs.2026.3690970","title":"Generative AI for Ransomware Identification and Mitigation: Taxonomy, Challenges, and Future Directions","display_name":"Generative AI for Ransomware Identification and Mitigation: Taxonomy, Challenges, and Future Directions","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7160238021","doi":"https://doi.org/10.1109/ojcs.2026.3690970"},"language":null,"primary_location":{"id":"doi:10.1109/ojcs.2026.3690970","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcs.2026.3690970","pdf_url":null,"source":{"id":"https://openalex.org/S4210176459","display_name":"IEEE Open Journal of the Computer Society","issn_l":"2644-1268","issn":["2644-1268"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Computer Society","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/ojcs.2026.3690970","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5117490014","display_name":"Erick D. Ramirez-Martinez","orcid":"https://orcid.org/0009-0003-2057-7595"},"institutions":[{"id":"https://openalex.org/I98461037","display_name":"Tecnol\u00f3gico de Monterrey","ror":"https://ror.org/03ayjn504","country_code":"MX","type":"education","lineage":["https://openalex.org/I98461037"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"Erick D. Ram\u00edrez-Mart\u00ednez","raw_affiliation_strings":["Tecnologico de Monterrey, School of Engineering and Sciences, Monterrey, Mexico"],"raw_orcid":"https://orcid.org/0009-0003-2057-7595","affiliations":[{"raw_affiliation_string":"Tecnologico de Monterrey, School of Engineering and Sciences, Monterrey, Mexico","institution_ids":["https://openalex.org/I98461037"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135413055","display_name":"Jes\u00fas A. P\u00e9rez-D-az","orcid":null},"institutions":[{"id":"https://openalex.org/I98461037","display_name":"Tecnol\u00f3gico de Monterrey","ror":"https://ror.org/03ayjn504","country_code":"MX","type":"education","lineage":["https://openalex.org/I98461037"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"Jes\u00fas A. P\u00e9rez-D\u00edaz","raw_affiliation_strings":["Tecnologico de Monterrey, School of Engineering and Sciences, Monterrey, Mexico"],"raw_orcid":"https://orcid.org/0000-0002-7678-5487","affiliations":[{"raw_affiliation_string":"Tecnologico de Monterrey, School of Engineering and Sciences, Monterrey, Mexico","institution_ids":["https://openalex.org/I98461037"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5135302959","display_name":"Noe M. Yungaicela-Naula","orcid":null},"institutions":[{"id":"https://openalex.org/I126231945","display_name":"Queen's University Belfast","ror":"https://ror.org/00hswnk62","country_code":"GB","type":"education","lineage":["https://openalex.org/I126231945"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Noe M. Yungaicela-Naula","raw_affiliation_strings":["Centre for Secure Information Technologies (CSIT), Queen's University Belfast, Belfast, U.K"],"raw_orcid":"https://orcid.org/0000-0002-3131-0672","affiliations":[{"raw_affiliation_string":"Centre for Secure Information Technologies (CSIT), Queen's University Belfast, Belfast, U.K","institution_ids":["https://openalex.org/I126231945"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1750,"currency":"USD","value_usd":1750},"apc_paid":{"value":1750,"currency":"USD","value_usd":1750},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.69358701,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"7","issue":null,"first_page":"1064","last_page":"1082"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9132000207901001,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9132000207901001,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.019999999552965164,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.007000000216066837,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5537999868392944},{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.4722000062465668},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.3594000041484833},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.2743000090122223},{"id":"https://openalex.org/keywords/expert-system","display_name":"Expert system","score":0.2554999887943268}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6118999719619751},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5537999868392944},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4726000130176544},{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.4722000062465668},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.3594000041484833},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2743000090122223},{"id":"https://openalex.org/C58328972","wikidata":"https://www.wikidata.org/wiki/Q184609","display_name":"Expert system","level":2,"score":0.2554999887943268},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.2515000104904175},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.2498999983072281},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.24570000171661377}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ojcs.2026.3690970","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcs.2026.3690970","pdf_url":null,"source":{"id":"https://openalex.org/S4210176459","display_name":"IEEE Open Journal of the Computer Society","issn_l":"2644-1268","issn":["2644-1268"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Computer Society","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/ojcs.2026.3690970","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcs.2026.3690970","pdf_url":null,"source":{"id":"https://openalex.org/S4210176459","display_name":"IEEE Open Journal of the Computer Society","issn_l":"2644-1268","issn":["2644-1268"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Computer Society","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.7045994400978088,"display_name":"Climate action","id":"https://metadata.un.org/sdg/13"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Ransomware":[0],"is":[1,6,34,151],"a":[2,39,65,92,129,152],"relevant":[3],"threat":[4],"that":[5,149],"causing":[7],"losses":[8],"in":[9,55,99],"millions":[10],"and":[11,24,49,82,108,118,135,143,156,163,168],"affecting":[12],"several":[13],"organizations":[14],"worldwide.":[15],"Emerging":[16],"actors":[17],"leverage":[18],"strategies":[19],"such":[20],"as":[21,38],"living-off-the-land,":[22],"obfuscation,":[23],"fileless":[25],"malware":[26],"to":[27,61,141],"perform":[28],"increasingly":[29],"sophisticated":[30],"attacks.":[31,86],"Generative":[32],"AI":[33,77],"now":[35],"being":[36],"considered":[37],"tool":[40],"for":[41,64,79,94,154,166],"combating":[42],"cyberattacks,":[43],"but":[44],"its":[45],"real-world":[46],"effectiveness,":[47],"risks,":[48],"deployment":[50],"trade-offs":[51],"are":[52],"still":[53],"unclear":[54],"the":[56,62,73,80,96,122],"field":[57],"of":[58,75,84,132],"ransomware,":[59],"pointing":[60],"need":[63,153],"thorough,":[66],"rigorous":[67],"review.":[68],"This":[69,126],"review":[70,147],"paper":[71],"investigates":[72],"application":[74],"generative":[76,136],"techniques":[78],"detection":[81,161],"mitigation":[83],"ransomware":[85,124,158],"To":[87],"this":[88],"end,":[89],"we":[90],"introduce":[91],"taxonomy":[93],"categorizing":[95],"solutions":[97,120],"presented":[98],"recent":[100],"studies,":[101],"thereby":[102],"offering":[103],"deeper":[104],"insights,":[105],"detecting":[106],"challenges,":[107],"proposing":[109],"research":[110,127],"directions.":[111],"We":[112],"also":[113],"discuss":[114],"misalignment":[115],"between":[116],"academia":[117],"industry":[119],"given":[121],"current":[123],"landscape.":[125],"presents":[128],"first":[130],"analysis":[131],"transformer":[133],"models":[134],"adversarial":[137],"networks":[138],"leveraged":[139],"exclusively":[140],"detect":[142],"mitigate":[144],"ransomware.":[145],"Our":[146],"reveals":[148],"there":[150],"dedicated":[155],"up-to-date":[157],"datasets,":[159],"new":[160,164],"strategies,":[162],"data":[165],"static":[167],"dynamic":[169],"analysis.":[170]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-05-06T00:00:00"}