Analysis of API calls with 'A' and 'W' suffixes used in parent and child processes for ransomware detection

• Published in: International Symposium on Computing and Networking (Online) pp. 176 - 182
• Main Authors: Matsuda, Yoshiki, Takahashi, Kenichi, Higashino, Masayuki, Kawamura, Takao
• Format: Conference Proceeding
• Language: English
• Published: IEEE 26.11.2024
• Subjects: API calls; child process; Encryption; parent process; Ransomware; Software
• ISSN: 2379-1896
• DOI: 10.1109/CANDAR64496.2024.00029

In recent years, the impact of ransomware attacks has been increasing. Consequently, numerous studies on ran-somware detection have been conducted. These studies often focus on the API calls used by ransomware. Ransomware frequently generates multiple child processes to conceal malicious behaviors s...