KRDroid: Ransomware-Oriented Detector for Mobile Devices Based on Behaviors

Ransomware has become a serious threat on Android and new cases of ransomware are continuously growing. Most existing detectors use sensitive text or APIs to detect ransomware. Some goodware applications with the functionalities locking screen encrypting files have similar behaviors It is difficult for identity them. In this paper, we made detailed analyses three kinds active We proposed behavior-based detector Android, called KRDroid. KRDroid deploys servers PCs, that is, cannot be activated cause any loss during testing. Experiments showed our ransomware-oriented can find 1809 1862 unseen also distinguish ransom an accuracy 97.5%.