{"id":"https://openalex.org/W3205163562","doi":"https://doi.org/10.1145/3479393","title":"Ransomware Mitigation in the Modern Era: A Comprehensive Review, Research Challenges, and Future Directions","display_name":"Ransomware Mitigation in the Modern Era: A Comprehensive Review, Research Challenges, and Future Directions","publication_year":2021,"publication_date":"2021-10-08","ids":{"openalex":"https://openalex.org/W3205163562","doi":"https://doi.org/10.1145/3479393","mag":"3205163562"},"language":"en","primary_location":{"id":"doi:10.1145/3479393","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3479393","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"type":"review","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5024454231","display_name":"Timothy R. McIntosh","orcid":"https://orcid.org/0000-0003-0836-4266"},"institutions":[{"id":"https://openalex.org/I196829312","display_name":"La Trobe University","ror":"https://ror.org/01rxfrp27","country_code":"AU","type":"education","lineage":["https://openalex.org/I196829312"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Timothy McIntosh","raw_affiliation_strings":["La Trobe University, Bundoora VIC, Australia"],"affiliations":[{"raw_affiliation_string":"La Trobe University, Bundoora VIC, Australia","institution_ids":["https://openalex.org/I196829312"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008691045","display_name":"A. S. M. Kayes","orcid":"https://orcid.org/0000-0002-2421-2214"},"institutions":[{"id":"https://openalex.org/I196829312","display_name":"La Trobe University","ror":"https://ror.org/01rxfrp27","country_code":"AU","type":"education","lineage":["https://openalex.org/I196829312"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"A. S. M. Kayes","raw_affiliation_strings":["La Trobe University, Bundoora VIC, Australia"],"affiliations":[{"raw_affiliation_string":"La Trobe University, Bundoora VIC, Australia","institution_ids":["https://openalex.org/I196829312"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100728316","display_name":"Yi\u2010Ping Phoebe Chen","orcid":"https://orcid.org/0000-0002-4122-3767"},"institutions":[{"id":"https://openalex.org/I196829312","display_name":"La Trobe University","ror":"https://ror.org/01rxfrp27","country_code":"AU","type":"education","lineage":["https://openalex.org/I196829312"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yi-Ping Phoebe Chen","raw_affiliation_strings":["La Trobe University, Bundoora VIC, Australia"],"affiliations":[{"raw_affiliation_string":"La Trobe University, Bundoora VIC, Australia","institution_ids":["https://openalex.org/I196829312"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061811149","display_name":"Alex Ng","orcid":"https://orcid.org/0000-0002-5809-2150"},"institutions":[{"id":"https://openalex.org/I196829312","display_name":"La Trobe University","ror":"https://ror.org/01rxfrp27","country_code":"AU","type":"education","lineage":["https://openalex.org/I196829312"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Alex Ng","raw_affiliation_strings":["La Trobe University, Bundoora VIC, Australia"],"affiliations":[{"raw_affiliation_string":"La Trobe University, Bundoora VIC, Australia","institution_ids":["https://openalex.org/I196829312"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5074086920","display_name":"Paul Watters","orcid":"https://orcid.org/0000-0002-1399-7175"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Paul Watters","raw_affiliation_strings":["Cyberstronomy Pty Ltd, Ballarat, Victoria, Australia"],"affiliations":[{"raw_affiliation_string":"Cyberstronomy Pty Ltd, Ballarat, Victoria, Australia","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5024454231"],"corresponding_institution_ids":["https://openalex.org/I196829312"],"apc_list":null,"apc_paid":null,"fwci":15.5875,"has_fulltext":false,"cited_by_count":137,"citation_normalized_percentile":{"value":0.99572164,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"54","issue":"9","first_page":"1","last_page":"36"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9679999947547913,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9672999978065491,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.981153130531311},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7259281873703003},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.677732527256012},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5573915243148804},{"id":"https://openalex.org/keywords/sophistication","display_name":"Sophistication","score":0.537990152835846},{"id":"https://openalex.org/keywords/payment","display_name":"Payment","score":0.4104747176170349},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.39518114924430847},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.07804355025291443}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.981153130531311},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7259281873703003},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.677732527256012},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5573915243148804},{"id":"https://openalex.org/C168725872","wikidata":"https://www.wikidata.org/wiki/Q991663","display_name":"Sophistication","level":2,"score":0.537990152835846},{"id":"https://openalex.org/C145097563","wikidata":"https://www.wikidata.org/wiki/Q1148747","display_name":"Payment","level":2,"score":0.4104747176170349},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.39518114924430847},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.07804355025291443},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3479393","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3479393","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7900000214576721,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":123,"referenced_works":["https://openalex.org/W1546285722","https://openalex.org/W1981726210","https://openalex.org/W1994020507","https://openalex.org/W1996716108","https://openalex.org/W2033811191","https://openalex.org/W2119359024","https://openalex.org/W2132874238","https://openalex.org/W2137974280","https://openalex.org/W2166023715","https://openalex.org/W2245015425","https://openalex.org/W2296579688","https://openalex.org/W2461651791","https://openalex.org/W2496077260","https://openalex.org/W2524919294","https://openalex.org/W2533895917","https://openalex.org/W2539082945","https://openalex.org/W2544488729","https://openalex.org/W2552218842","https://openalex.org/W2558619741","https://openalex.org/W2559964890","https://openalex.org/W2566926062","https://openalex.org/W2601591992","https://openalex.org/W2605860169","https://openalex.org/W2613007966","https://openalex.org/W2619422284","https://openalex.org/W2738263528","https://openalex.org/W2760134935","https://openalex.org/W2760864453","https://openalex.org/W2764249719","https://openalex.org/W2766096867","https://openalex.org/W2772124517","https://openalex.org/W2775237336","https://openalex.org/W2775582065","https://openalex.org/W2776078261","https://openalex.org/W2779814706","https://openalex.org/W2780577826","https://openalex.org/W2784028699","https://openalex.org/W2786921024","https://openalex.org/W2789729245","https://openalex.org/W2790746246","https://openalex.org/W2792599578","https://openalex.org/W2793829161","https://openalex.org/W2795248401","https://openalex.org/W2795995661","https://openalex.org/W2799620259","https://openalex.org/W2806265048","https://openalex.org/W2807312247","https://openalex.org/W2808131992","https://openalex.org/W2808706667","https://openalex.org/W2808997185","https://openalex.org/W2809959305","https://openalex.org/W2885702634","https://openalex.org/W2885747980","https://openalex.org/W2887506070","https://openalex.org/W2887670066","https://openalex.org/W2887954984","https://openalex.org/W2890196927","https://openalex.org/W2890703206","https://openalex.org/W2893176864","https://openalex.org/W2896604238","https://openalex.org/W2899124034","https://openalex.org/W2902302694","https://openalex.org/W2902458612","https://openalex.org/W2906139053","https://openalex.org/W2907781975","https://openalex.org/W2910470804","https://openalex.org/W2911311548","https://openalex.org/W2918753059","https://openalex.org/W2923699932","https://openalex.org/W2928980918","https://openalex.org/W2938696059","https://openalex.org/W2943086164","https://openalex.org/W2951172748","https://openalex.org/W2953056235","https://openalex.org/W2955105517","https://openalex.org/W2957305577","https://openalex.org/W2960902621","https://openalex.org/W2962848982","https://openalex.org/W2962912862","https://openalex.org/W2964829536","https://openalex.org/W2966789963","https://openalex.org/W2972552958","https://openalex.org/W2974072230","https://openalex.org/W2980075242","https://openalex.org/W2982782590","https://openalex.org/W2988809393","https://openalex.org/W2990939506","https://openalex.org/W2993999308","https://openalex.org/W2998089273","https://openalex.org/W2998708406","https://openalex.org/W3003433587","https://openalex.org/W3007360442","https://openalex.org/W3009137375","https://openalex.org/W3013116456","https://openalex.org/W3013376267","https://openalex.org/W3014117990","https://openalex.org/W3015800066","https://openalex.org/W3021147902","https://openalex.org/W3028767182","https://openalex.org/W3032179786","https://openalex.org/W3034363407","https://openalex.org/W3035775076","https://openalex.org/W3043780676","https://openalex.org/W3046149163","https://openalex.org/W3047996415","https://openalex.org/W3082732123","https://openalex.org/W3083177412","https://openalex.org/W3091601522","https://openalex.org/W3092406352","https://openalex.org/W3092619921","https://openalex.org/W3093612846","https://openalex.org/W3094219804","https://openalex.org/W3095793088","https://openalex.org/W3122507336","https://openalex.org/W3153065797","https://openalex.org/W4205451754","https://openalex.org/W4230719179","https://openalex.org/W4242289848","https://openalex.org/W4248806346","https://openalex.org/W4253193808","https://openalex.org/W4401751359","https://openalex.org/W4405183504","https://openalex.org/W7027738607"],"related_works":["https://openalex.org/W3201228709","https://openalex.org/W2922354075","https://openalex.org/W4253977752","https://openalex.org/W2964829536","https://openalex.org/W3202245533","https://openalex.org/W3120595989","https://openalex.org/W4232561318","https://openalex.org/W4224941017","https://openalex.org/W4366249425","https://openalex.org/W2964936987"],"abstract_inverted_index":{"Although":[0],"ransomware":[1,61,75,142,157,193],"has":[2,34,77,112],"been":[3],"around":[4],"since":[5],"the":[6,20,74,98,103,117,131,138,161,177,189],"early":[7],"days":[8],"of":[9,26,81,102,109,122,134,149,192],"personal":[10],"computers,":[11],"its":[12],"sophistication":[13],"and":[14,43,47,51,100,136,159,170,174,184,195],"aggression":[15],"have":[16,59,84,96],"increased":[17],"substantially":[18],"over":[19],"years.":[21],"Ransomware,":[22],"as":[23],"a":[24,147],"type":[25],"malware":[27],"to":[28,36,54,114,152,163,167,179],"extort":[29],"ransom":[30],"payments":[31],"from":[32],"victims,":[33],"evolved":[35,78],"deliver":[37],"payloads":[38],"in":[39,140],"different":[40],"attack":[41],"vectors":[42],"on":[44,93,116,156],"multiple":[45],"platforms,":[46],"creating":[48],"repeated":[49],"disruptions":[50],"financial":[52],"loss":[53],"many":[55,80],"victims.":[56],"Many":[57],"studies":[58,83,95,104,155,166],"performed":[60],"analysis":[62],"and/or":[63],"presented":[64],"detection,":[65],"defense,":[66],"or":[67,88,119],"prevention":[68],"techniques":[69],"for":[70],"ransomware.":[71],"However,":[72],"because":[73],"landscape":[76],"aggressively,":[79],"those":[82,110,123],"become":[85],"less":[86],"relevant":[87],"even":[89],"outdated.":[90],"Previous":[91],"surveys":[92,111],"anti-ransomware":[94],"compared":[97],"methods":[99],"results":[101],"they":[105],"surveyed,":[106],"but":[107],"none":[108],"attempted":[113],"critique":[115],"internal":[118],"external":[120],"validity":[121],"studies.":[124],"In":[125],"this":[126],"survey,":[127],"we":[128,187],"first":[129],"examined":[130],"up-to-date":[132],"concept":[133],"ransomware,":[135],"listed":[137],"inadequacies":[139],"current":[141],"research.":[143],"We":[144],"then":[145],"proposed":[146],"set":[148],"unified":[150],"metrics":[151,162],"evaluate":[153,180],"published":[154],"mitigation,":[158],"applied":[160],"118":[164],"such":[165],"comprehensively":[168],"compare":[169],"contrast":[171],"their":[172,181],"pros":[173],"cons,":[175],"with":[176],"attempt":[178],"relative":[182],"strengths":[183],"weaknesses.":[185],"Finally,":[186],"forecast":[188],"future":[190,197],"trends":[191],"evolution,":[194],"propose":[196],"research":[198],"directions.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":30},{"year":2024,"cited_by_count":39},{"year":2023,"cited_by_count":50},{"year":2022,"cited_by_count":12}],"updated_date":"2026-04-11T08:14:18.477133","created_date":"2025-10-10T00:00:00"}
