Anti-ransomware method based on active deception

Abstract

Considering the serious threat that ransomware poses to data security and the increasing intelligence and complexity of its attack methods, an anti-ransomware method based on active deception was proposed to address the limitations of traditional defense methods. By combining static heuristic algorithms and dynamic heuristic algorithms to dynamically deploy deceptive files, a dynamic file security model based on active deception was established. Different strategies were employed to generate dynamic deceptive files for ransomware of different risk levels, confusing ransomware by simulating the characteristics of real data, making it unable to distinguish between real and deceptive data, thus protecting users’ real data from encryption or destruction. Experimental results show that the proposed method effectively increases the dynamism, diversity, and deceptiveness of files, significantly expanding the shifting space of data attack surfaces and effectively defending against ransomware attacks.

Keywords

• active deception;anti-ransomware;data attack surface;data deception