Method and System for Effective Detection of Ransomware using Machine Learning based on Entropy of File in Backup System

摘要

An effective ransomware detection method and system using machine learning based on the entropy of a file in a backup system is presented. In one aspect, the effective ransomware detection method using machine learning based on the entropy of a file in the backup system proposed by the present invention measures the entropy for each user and each file format through the backup system, and each measured entropy The step of deriving an entropy reference value for detecting a file infected with ransomware using machine learning based on Measuring the entropy of the file synchronized from the detection module to the backup system, and detecting the file infected with the ransomware by comparing the measured entropy of the file synchronized to the backup system with the entropy reference value transmitted from the backup system.