2019년 랜섬웨어 암호화 프로세스 분석 및 복호화 방안 연구
A Study on Encryption Process and Decryption of Ransomware in 2019
0
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
랜섬웨어는 사용자의 파일을 암호화하고, 이를 복구하는 대가로 금전을 요구하는 악성 소프트웨어다. 랜섬웨어의수가 늘어남과 동시에 사용되는 암호화 프로세스 또한 정교해지며 보안 강도도 높아지고 있다. 이에 따라 랜섬웨어의분석은 점점 어려워지고 복구 가능한 랜섬웨어의 수도 줄어들고 있다. 그러므로 지능화된 랜섬웨어의 암호화 프로세스 및 복호화 방안에 관한 연구는 필수적이다. 본 논문은 2019년 주요 신규 랜섬웨어 5종에 대해 역공학하여 암호화프로세스를 밝히고 이를 기반으로 복구 가능성에 대한 연구를 진행하였다.
Abstract
Ransomware is a malicious software which requires money to decrypt files that were encrypted. As the number ofransomware grows, the encryption process in ransomware has been more sophisticated and the strength of security has beenmore stronger. As a result, analysis of ransomware becomes more difficult and the number of decryptable ransomware isgetting smaller. So, research on encryption process and decryption method of ransomware is necessary. In this paper, weshow encryption processes of 5 ransomwares which were revealed in 2019, and analyze whether or not those ransomwaresare decryptable.
참고문헌 (19)
- "The Dark Web Created by High Technology" (2019)[URL]
- "Norsk Hydro hits LockerGoga, too late to release financial report" (2019)[URL]
- "Jackson County, Georgia Attacked Ransomware, decided to pay $400,000" (2019)[URL]
- "Baltimore City infected with ransomware" (2019)[URL]
- "Domestic specific school management program infected by Ransomware" (2019)[URL]
- Lu, T., "Ransomware Detection based on V-detector Negative Selection Algorithm", Proceedings of the 2017International Conference on Security, Pattern Analysis, and Cybernetics (SPAC), pp.531~536 (2017)
- Hampton, N., "Ransomware Behavioural Analysis on Windows Platforms", J. Inf. Secur. Appl, 40, pp.44~51 (2018)
- Azmoodeh, Amin, "Detecting crypto-ransomware in IoT networks based on energy consumption footprint", Journal of Ambient Intelligence and Humanized Computing, 9(4), pp.1141~1152 (2018)
- Natanzon, Assaf, "Ransomware detection using I", O patterns, 275,759, ~
- Kolodenker, E., "PayBreak: Defense against Cryptographic Ransomware", Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security, pp.599~611 (2017)
- "2019 ransomware trends" (2019)[URL]
- "Sodinokibi" (2019)[URL]
- "BoanNews" (2019)[URL]
- "Phobos Ransomware" (2019)[URL]
- "Crypto" (2019)[URL]
- "LooCipher" (2019)[URL]
- C. De Canniere, "eSTREAM Software Performance", LNCS, 4986, pp.119~139 (2008)
- "Gandcrab" (2019)[URL]
- "Gandcrab" (2019)[URL]