TY - Jour A2 - Yang，Seung Au - Song，Sanggeun Au - Kim，Bongjoon Au - Lee，Sangjun Py - 2016 Da - 2016/05/15 Ti - 使用过程监控的有效赎金软件预防技术在Android平台上SP - 2946735 VL- 2016 AB - Due to recent indiscriminate attacks of ransomware, damage cases including encryption of users’ important files are constantly increasing. The existing vaccine systems are vulnerable to attacks of new pattern ransomware because they can only detect the ransomware of existing patterns. More effective technique is required to prevent modified ransomware. In this paper, an effective method is proposed to prevent the attacks of modified ransomware on Android platform. The proposed technique specifies and intensively monitors processes and specific file directories using statistical methods based on Processor usage, Memory usage, and I/O rates so that the process with abnormal behaviors can be detected. If the process running a suspicious ransomware is detected, the proposed system will stop the process and take steps to confirm the deletion of programs associated with the process from users. The information of suspected and exceptional processes confirmed by users is stored in a database. The proposed technique can detect ransomware even if you do not save its patterns. Its speed of detection is very fast because it can be implemented in Android source code instead of mobile application. In addition, it can effectively determine modified patterns of ransomware and provide protection with minimum damage. SN - 1574-017X UR - https://doi.org/10.1155/2016/2946735 DO - 10.1155/2016/2946735 JF - Mobile Information Systems PB - Hindawi Publishing Corporation KW - ER -