Ransomware is a growing threat to the computer world that encrypts victim’s data and asks for ransom for decryption key which causes financial loss and severe disruption in the organization. Despite the threat and an extremely growing number of cases of ransomware infection, various countermeasures have been proposed since the first appearance of ransomware but there is still not enough information on the approaches to detect it. Thus, this paper will perform ransomware detection using the behavioral method on information retrieved from computer sensors such as CPU, Main Memory and Disk Memory. The different classification method such as Na?ve Bayes, J48 and KStar algorithm will be used to detect the ransomware attack and the measured value in term of accuracy.
展开▼
