Ransomware Detection using Process Memory

Ransomware attacks have increased significantly in recent years, causing great destruction and damage to critical systems business operations. Attackers are unfailingly finding innovative ways bypass detection mechanisms, which encouraged the adoption of artificial intelligence. However, most research summarizes general features AI induces many false positives, as behavior ransomware constantly differs detection. Focusing on key indicating becomes vital this guides investigator inner workings main function itself. By utilizing access privileges process memory, can be detected more easily accurately. Furthermore, new signatures fingerprints families identified classify novel correctly. The current used memory different regions an executable quickly determine its intent before serious harm occur. To achieve aim, several well-known machine learning algorithms were explored with accuracy range 81.38% – 96.28%. study thus confirms feasibility a mechanism for ransomware.