TLERAD: Transfer Learning for Enhanced Ransomware Attack Detection  

作　　者：Isha Sood Varsha Sharm 

机构地区：[1]a School of Information Technology,Rajiv Gandhi Proudyogiki Vishwavidyalaya,Bhopal,462033,India

出　　处：《Computers, Materials & Continua》2024年第11期2791-2818,共28页计算机、材料和连续体（英文）

摘　　要：Ransomware has emerged as a critical cybersecurity threat,characterized by its ability to encrypt user data or lock devices,demanding ransom for their release.Traditional ransomware detection methods face limitations due to their assumption of similar data distributions between training and testing phases,rendering them less effective against evolving ransomware families.This paper introduces TLERAD(Transfer Learning for Enhanced Ransomware Attack Detection),a novel approach that leverages unsupervised transfer learning and co-clustering techniques to bridge the gap between source and target domains,enabling robust detection of both known and unknown ransomware variants.The proposed method achieves high detection accuracy,with an AUC of 0.98 for known ransomware and 0.93 for unknown ransomware,significantly outperforming baseline methods.Comprehensive experiments demonstrate TLERAD’s effectiveness in real-world scenarios,highlighting its adapt-ability to the rapidly evolving ransomware landscape.The paper also discusses future directions for enhancing TLERAD,including real-time adaptation,integration with lightweight and post-quantum cryptography,and the incorporation of explainable AI techniques.

关 键 词：Ransomware detection transfer learning unsupervised learning CO-CLUSTERING CYBERSECURITY machine learning lightweight cryptography post-quantum cryptography explainable AI TLERAD 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]