{"id":"https://openalex.org/W3044316786","doi":"https://doi.org/10.1109/tc.2020.3011214","title":"SSD-assisted Ransomware Detection and Data Recovery Techniques","display_name":"SSD-assisted Ransomware Detection and Data Recovery Techniques","publication_year":2020,"publication_date":"2020-01-01","ids":{"openalex":"https://openalex.org/W3044316786","doi":"https://doi.org/10.1109/tc.2020.3011214","mag":"3044316786"},"language":"en","primary_location":{"id":"doi:10.1109/tc.2020.3011214","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tc.2020.3011214","pdf_url":null,"source":{"id":"https://openalex.org/S157670870","display_name":"IEEE Transactions on Computers","issn_l":"0018-9340","issn":["0018-9340","1557-9956","2326-3814"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computers","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103275170","display_name":"Sung-Ha Baek","orcid":"https://orcid.org/0000-0002-3274-5467"},"institutions":[{"id":"https://openalex.org/I191879574","display_name":"Inha University","ror":"https://ror.org/01easw929","country_code":"KR","type":"education","lineage":["https://openalex.org/I191879574"]}],"countries":["KR"],"is_corresponding":true,"raw_author_name":"Sungha Baek","raw_affiliation_strings":["Inha University, Incheon, Republic of Korea"],"affiliations":[{"raw_affiliation_string":"Inha University, Incheon, Republic of Korea","institution_ids":["https://openalex.org/I191879574"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090623226","display_name":"Youngdon Jung","orcid":null},"institutions":[{"id":"https://openalex.org/I193352282","display_name":"Daegu Gyeongbuk Institute of Science and Technology","ror":"https://ror.org/03frjya69","country_code":"KR","type":"education","lineage":["https://openalex.org/I193352282"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Youngdon Jung","raw_affiliation_strings":["Department of Information & Communication Engineering, Daegu Institue of Science and Technology, Daegu, Republic of Korea"],"affiliations":[{"raw_affiliation_string":"Department of Information & Communication Engineering, Daegu Institue of Science and Technology, Daegu, Republic of Korea","institution_ids":["https://openalex.org/I193352282"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077402873","display_name":"Aziz Mohaisen","orcid":"https://orcid.org/0000-0003-3227-2505"},"institutions":[{"id":"https://openalex.org/I106165777","display_name":"University of Central Florida","ror":"https://ror.org/036nfer12","country_code":"US","type":"education","lineage":["https://openalex.org/I106165777"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aziz Mohaisen","raw_affiliation_strings":["University of Central Florida, Orlando, FL, USA"],"affiliations":[{"raw_affiliation_string":"University of Central Florida, Orlando, FL, USA","institution_ids":["https://openalex.org/I106165777"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100720092","display_name":"Sungjin Lee","orcid":"https://orcid.org/0000-0002-9753-2286"},"institutions":[{"id":"https://openalex.org/I193352282","display_name":"Daegu Gyeongbuk Institute of Science and Technology","ror":"https://ror.org/03frjya69","country_code":"KR","type":"education","lineage":["https://openalex.org/I193352282"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Sungjin Lee","raw_affiliation_strings":["Department of Information & Communication Engineering, Daegu Institue of Science and Technology, Daegu, Republic of Korea"],"affiliations":[{"raw_affiliation_string":"Department of Information & Communication Engineering, Daegu Institue of Science and Technology, Daegu, Republic of Korea","institution_ids":["https://openalex.org/I193352282"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5079230730","display_name":"DaeHun Nyang","orcid":"https://orcid.org/0000-0001-5183-891X"},"institutions":[{"id":"https://openalex.org/I138925566","display_name":"Ewha Womans University","ror":"https://ror.org/053fp5c05","country_code":"KR","type":"education","lineage":["https://openalex.org/I138925566"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Daehun Nyang","raw_affiliation_strings":["Cyber Security Department, Ewha Womans University 52, Seoul, Republic of Korea"],"affiliations":[{"raw_affiliation_string":"Cyber Security Department, Ewha Womans University 52, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I138925566"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5103275170"],"corresponding_institution_ids":["https://openalex.org/I191879574"],"apc_list":null,"apc_paid":null,"fwci":4.0914,"has_fulltext":false,"cited_by_count":43,"citation_normalized_percentile":{"value":0.9479921,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"1"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11181","display_name":"Advanced Data Storage Technologies","score":0.9927999973297119,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.9562347531318665},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7417306303977966},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.6376537084579468},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5746234655380249},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.5379773378372192},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5336946249008179},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4967842400074005},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.43504273891448975},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.34929946064949036},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.3276061415672302},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.31998342275619507}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.9562347531318665},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7417306303977966},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.6376537084579468},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5746234655380249},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.5379773378372192},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5336946249008179},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4967842400074005},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43504273891448975},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.34929946064949036},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3276061415672302},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.31998342275619507},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tc.2020.3011214","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tc.2020.3011214","pdf_url":null,"source":{"id":"https://openalex.org/S157670870","display_name":"IEEE Transactions on Computers","issn_l":"0018-9340","issn":["0018-9340","1557-9956","2326-3814"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computers","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5400000214576721}],"awards":[{"id":"https://openalex.org/G2162281552","display_name":null,"funder_award_id":"NRF-2018R1A5A1060031","funder_id":"https://openalex.org/F4320322120","funder_display_name":"National Research Foundation of Korea"},{"id":"https://openalex.org/G4960175792","display_name":null,"funder_award_id":"NRF-2017R1E1A1A01077410","funder_id":"https://openalex.org/F4320322120","funder_display_name":"National Research Foundation of Korea"}],"funders":[{"id":"https://openalex.org/F4320322120","display_name":"National Research Foundation of Korea","ror":"https://ror.org/013aysd81"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W1591367040","https://openalex.org/W2015664670","https://openalex.org/W2106609873","https://openalex.org/W2149706766","https://openalex.org/W2177710037","https://openalex.org/W2347019181","https://openalex.org/W2513529237","https://openalex.org/W2559964890","https://openalex.org/W2765713146","https://openalex.org/W2808706667","https://openalex.org/W2902458612","https://openalex.org/W2931650928","https://openalex.org/W2945824389","https://openalex.org/W4236137412"],"related_works":["https://openalex.org/W3201228709","https://openalex.org/W2922354075","https://openalex.org/W4389157351","https://openalex.org/W4232561318","https://openalex.org/W4253977752","https://openalex.org/W3120595989","https://openalex.org/W2964829536","https://openalex.org/W2904586340","https://openalex.org/W2942879794","https://openalex.org/W3214090987"],"abstract_inverted_index":{"As":[0],"ransomware":[1,24,38,90],"attacks":[2],"have":[3],"been":[4],"prevalent,":[5],"it":[6,59],"becomes":[7],"crucial":[8],"to":[9,73,138],"make":[10],"anti-ransomware":[11],"solutions":[12],"that":[13,159],"defend":[14],"against":[15],"ransomwares.":[16],"In":[17],"this":[18],"article,":[19],"we":[20],"propose":[21],"a":[22,48,56,110,144,152],"new":[23],"defense":[25],"system,":[26],"called":[27],"<i>SSD-Insider++</i>":[28],",":[29],"which":[30,70,96],"prevents":[31],"users\u2019":[32],"files":[33,141],"from":[34,55],"being":[35,53,119],"damaged":[36],"by":[37,121,142],"attacks.":[39],"SSD-Insider++":[40,83,160,189],"is":[41,84,118,131,136,190],"embedded":[42],"into":[43],"an":[44,124,128,149,176],"SSD":[45,150],"controller":[46],"as":[47],"form":[49],"of":[50,86,109,148,164,187],"firmware.":[51],"By":[52],"separated":[54],"host":[57,111,117],"machine,":[58],"not":[60],"only":[61,193],"provides":[62,175],"more":[63,205],"robust":[64],"data":[65,94,178,183],"protection":[66],"than":[67],"software-based":[68],"ones":[69],"are":[71,97,203],"vulnerable":[72],"evasion":[74],"attacks,":[75],"but":[76],"also":[77],"offers":[78],"interoperability":[79],"with":[80,100,167,180],"various":[81],"platforms.":[82],"composed":[85],"two":[87],"novel":[88],"features,":[89],"detection":[91,104],"and":[92,113,174,198,210],"perfect":[93],"recovery,":[95],"tightly":[98],"integrated":[99],"each":[101],"other.":[102],"The":[103,185],"algorithm":[105,135],"observes":[106],"I/O":[107],"patterns":[108],"system":[112],"decides":[114],"whether":[115],"the":[116,133],"attacked":[120],"ransomwares":[122,166],"in":[123,171],"early":[125],"stage.":[126],"Once":[127],"encryption":[129],"attack":[130],"detected,":[132],"recovery":[134,179],"triggered":[137],"recover":[139],"original":[140],"leveraging":[143],"delayed":[145],"deletion":[146],"feature":[147],"at":[151],"low":[153],"cost.":[154],"Our":[155],"experimental":[156],"results":[157],"show":[158],"achieves":[161],"high":[162],"accuracy":[163],"detecting":[165],"0":[168,181],"percent":[169,182],"FRR/FAR":[170],"most":[172],"cases":[173],"instant":[177],"loss.":[184],"overhead":[186],"running":[188],"negligible":[191],"\u2013":[192],"80":[194],"<inline-formula><tex-math":[195,200],"notation=\"LaTeX\">$n$</tex-math></inline-formula>":[196,201],"s":[197,202],"226":[199],"spent":[204],"for":[206],"handling":[207],"4-KB":[208],"reads":[209],"writes,":[211],"respectively.":[212]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":12},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":6}],"updated_date":"2026-02-25T23:00:34.991745","created_date":"2025-10-10T00:00:00"}