Ransomware Honeypot: Honeypot solution designed to detect a ransomware infection identify the ransomware family

摘要

Ransomware poses a major threat to information integrity and availability. This type of malware will encrypt files on infected computers and demand ransom in return to restoring access. These scale to companies and institutions with devastating consequences. The goal of this paper is to propose a solution based on low cost hardware that will serve as a honeypot or trap for Ransomware viruses and it will alert defenders, giving them valuable data about the type of ransomware, which computer got infected first, and if there are any decryption software available.