{"id":"https://openalex.org/W3013176064","doi":"https://doi.org/10.5220/0009000505850592","title":"Dual-use Research in Ransomware Attacks: A Discussion on Ransomware Defence Intelligence","display_name":"Dual-use Research in Ransomware Attacks: A Discussion on Ransomware Defence Intelligence","publication_year":2020,"publication_date":"2020-01-01","ids":{"openalex":"https://openalex.org/W3013176064","doi":"https://doi.org/10.5220/0009000505850592","mag":"3013176064"},"language":"en","primary_location":{"id":"doi:10.5220/0009000505850592","is_oa":true,"landing_page_url":"https://doi.org/10.5220/0009000505850592","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 6th International Conference on Information Systems Security and Privacy","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.5220/0009000505850592","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035371222","display_name":"Ziya Alper Gen\u00e7","orcid":"https://orcid.org/0000-0001-7198-7437"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]},{"id":"https://openalex.org/I4405259781","display_name":"Interdisciplinary Centre for Security, Reliability and Trust","ror":"https://ror.org/02qav7c04","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Ziya Gen\u00e7","raw_affiliation_strings":["Interdisciplinary Centre for Security, Reliability and Trust (SnT), University of Luxembourg, Luxembourg, --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Interdisciplinary Centre for Security, Reliability and Trust (SnT), University of Luxembourg, Luxembourg, --- Select a Country ---","institution_ids":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5070924321","display_name":"Gabriele Lenzini","orcid":"https://orcid.org/0000-0001-8229-3270"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]},{"id":"https://openalex.org/I4405259781","display_name":"Interdisciplinary Centre for Security, Reliability and Trust","ror":"https://ror.org/02qav7c04","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}],"countries":["LU"],"is_corresponding":true,"raw_author_name":"Gabriele Lenzini","raw_affiliation_strings":["Interdisciplinary Centre for Security, Reliability and Trust (SnT), University of Luxembourg, Luxembourg, --- Select a Country ---"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Interdisciplinary Centre for Security, Reliability and Trust (SnT), University of Luxembourg, Luxembourg, --- Select a Country ---","institution_ids":["https://openalex.org/I186903577","https://openalex.org/I4405259781"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5070924321"],"corresponding_institution_ids":["https://openalex.org/I186903577","https://openalex.org/I4405259781"],"apc_list":null,"apc_paid":null,"fwci":0.3286,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.4465551,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"585","last_page":"592"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9732999801635742,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9664999842643738,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.9650729894638062},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7090867757797241},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6628729701042175},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.606399416923523},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5540107488632202},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.47697362303733826},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4189056158065796},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.12923681735992432},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.07335460186004639}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.9650729894638062},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7090867757797241},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6628729701042175},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.606399416923523},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5540107488632202},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.47697362303733826},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4189056158065796},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.12923681735992432},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.07335460186004639},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5220/0009000505850592","is_oa":true,"landing_page_url":"https://doi.org/10.5220/0009000505850592","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 6th International Conference on Information Systems Security and Privacy","raw_type":"proceedings-article"},{"id":"pmh:oai:orbilu.uni.lu:10993/42164","is_oa":true,"landing_page_url":"https://orbilu.uni.lu/handle/10993/42164","pdf_url":null,"source":{"id":"https://openalex.org/S4306401815","display_name":"Open Repository and Bibliography (University of Luxembourg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I186903577","host_organization_name":"University of Luxembourg","host_organization_lineage":["https://openalex.org/I186903577"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"doi:10.5220/0009000505850592","is_oa":true,"landing_page_url":"https://doi.org/10.5220/0009000505850592","pdf_url":null,"source":null,"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 6th International Conference on Information Systems Security and Privacy","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W1508973173","https://openalex.org/W1746848557","https://openalex.org/W2270778491","https://openalex.org/W2398582829","https://openalex.org/W2605067380","https://openalex.org/W2628359750","https://openalex.org/W2794784953","https://openalex.org/W2949012968","https://openalex.org/W2964144088"],"related_works":["https://openalex.org/W3201228709","https://openalex.org/W2922354075","https://openalex.org/W4389157351","https://openalex.org/W4232561318","https://openalex.org/W4253977752","https://openalex.org/W2942879794","https://openalex.org/W2964829536","https://openalex.org/W2904586340","https://openalex.org/W1995118279","https://openalex.org/W4240624848"],"abstract_inverted_index":{"Previous":[0],"research":[1],"has":[2,258],"shown":[3],"that":[4,93,118,190,250],"developers":[5],"rely":[6],"on":[7,100,231,255],"public":[8,57,202,235,256],"platforms":[9],"and":[10,34,110,115,149,156,162,180,239],"repositories":[11,203,236],"to":[12,59,64,71,135,153,175,215],"produce":[13,35],"functional":[14],"but":[15,198],"insecure":[16,36],"code.We":[17],"looked":[18],"into":[19],"the":[20,30,66,73,86,101,142],"matter":[21],"for":[22,219],"ransomware,":[23],"enquiring":[24],"whether":[25,264],"also":[26,251],"ransomware":[27,50,74,90,94,128,178,221],"engineers":[28],"re-use":[29],"work":[31],"of":[32,48,82,89,104,112,193],"others":[33],"code.By":[37],"methodically":[38],"reverse-engineering":[39],"128":[40],"malware":[41],"executables,":[42],"we":[43,62,78,188,213],"have":[44,228],"found":[45,189],"that,":[46],"out":[47],"21":[49],"samples,":[51],"9":[52],"contain":[53],"copy-paste":[54],"code":[55,83,194,257],"from":[56,200,234],"resources.Thanks":[58],"this":[60,76,105,123,168,186,207,241],"finding,":[61],"managed":[63,214],"retrieve":[65,141],"decryption":[67],"keys":[68],"with":[69,209],"which":[70,151,157,165],"nullify":[72],"attacks.From":[75],"fact,":[77],"recall":[79],"critical":[80],"cases":[81],"disclosure":[84],"in":[85,97],"recent":[87],"history":[88],"and,":[91],"arguing":[92],"are":[95,130],"components":[96],"cyber-weapons,":[98],"reflect":[99],"dual-use":[102],"nature":[103],"research.We":[106],"further":[107],"discuss":[108],"benefits":[109],"limits":[111],"using":[113,164],"cyber-intelligence":[114],"counter-intelligence":[116],"strategies":[117],"could":[119],"be":[120],"used":[121],"against":[122],"threat.":[124],"INTRODUCTIONIn":[125],"anti-ransomware":[126],"research,":[127],"samples":[129,179],"routinely":[131],"analyzed.The":[132],"goal":[133],"is":[134,173,225,237],"understand":[136],"how":[137,145,232,240],"they":[138,146,159],"generate":[139],"or":[140,204],"encryption":[143,166],"keys;":[144],"search,":[147],"sort":[148],"prioritize":[150],"files":[152,158],"target":[154],"first;":[155],"encrypt":[160],"first":[161],"by":[163],"algorithm.In":[167],"quite":[169],"methodical":[170],"work,":[171,212],"it":[172],"routine":[174],"reverse":[176],"engineer":[177],"analyze":[181],"their":[182],"source":[183],"codes.While":[184],"performing":[185],"task,":[187],"some":[191,210],"piece":[192],"was":[195],"not":[196,226],"original":[197],"copy-and-pasted":[199],"wellknown":[201],"developpers":[205],"communities.From":[206],"discovery,":[208],"additional":[211],"build":[216],"a":[217],"decryptor":[218],"those":[220],"samples.Although":[222],"our":[223,260],"discovery":[224],"surprisingresearchers":[227],"already":[229],"commented":[230],"codes":[233],"re-used":[238],"impacts":[242],"security":[243,253],"(e.g.,":[244],"see":[245],"(Fischer":[246],"et":[247],"al.,":[248],"2017))-realizing":[249],"ransomware's":[252],"depends":[254],"captured":[259],"attention.We":[261],"started":[262],"wondering":[263],"there":[265]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}