Addressing Crypto-Ransomware Attacks: Before You Decide whether To-Pay or Not-To. Issue 1 (2nd January 2021)

• Record Type: Journal Article
• Authors: Zimba, Aaron; Wang, Zhaoshun; Chishimba, Mumbi
• Is Part Of: Journal of computer information systems. Volume 61:Issue 1(2021)
• Page Start: 53
• Page End: 63
• Publication Date: 2021-01-02
• Subjects: Crypto-ransomware -- file encryption -- data deletion -- data recovery -- cyber-attacks; Electronic data processing -- Study and teaching -- Periodicals; 658.4038011
• DOI: 10.1080/08874417.2018.1564633
• Languages: English
• ISSNs: 0887-4417

Abstract

ABSTRACT: Crypto-ransomware attacks have forced victims to part away with millions of dollars using various intimidation and scare tactics. Victims have made hasty decisions of whether to pay or not without adequate information. In this paper, we explore options to address ransomware attacks before considering whether to pay or not. We propose a ransomware categorization framework that classifies the virulence of a ransomware attack using a proposed classification algorithm that is based on data deletion and file encryption attack structures. The categories that increase in severity from CAT1 to CAT8 classify the technical prowess and the overall effectiveness of potential ways of retaining the data without paying the ransom demand. The framework provides an avenue for a deeper comprehension of potential inadequacies and flaws to be exploited for data recovery. Results show that poorly implemented attack structures make recovery of data possible via system volume shadow copies or third-party software without paying.