展示收据:理解现代勒索软件生态系统
Showing the Receipts: Understanding the Modern Ransomware Ecosystem
AI总结:
针对勒索软件支付公开数据集有限的痛点,提出低误报识别支付的新技术,构建超9亿美元的最大公开数据集,并深入分析勒索软件团伙活动,为网络安全研究提供重要语料库。
摘要:
勒索软件攻击继续在全球肆虐,公开报告显示每年勒索软件支付总额高达数十亿美元。尽管加密货币的使用为理解勒索软件行为者的策略提供了途径,但迄今为止,已发表的研究受到相对有限的勒索软件支付公开数据集的制约。我们提出了新技术来识别低误报率的勒索软件支付,分类了近7亿美元此前未报告的勒索软件支付。我们发布了超过9亿美元勒索软件支付的最大公开数据集——比任何现有公开数据集大数倍。然后,我们利用这一扩展数据集进行分析,重点理解勒索软件群体随时间的活动。这为勒索软件行为提供了独特见解,并为未来研究勒索软件网络犯罪活动提供了语料库。
英文摘要:
Ransomware attacks continue to wreak havoc across the globe, with public reports of total ransomware payments topping billions of dollars annually. While the use of cryptocurrency presents an avenue to understand the tactics of ransomware actors, to date published research has been constrained by relatively limited public datasets of ransomware payments. We present novel techniques to identify ransomware payments with low false positives, classifying nearly \$700 million in previously-unreported ransomware payments. We publish the largest public dataset of over \$900 million in ransomware payments -- several times larger than any existing public dataset. We then leverage this expanded dataset to present an analysis focused on understanding the activities of ransomware groups over time. This provides unique insights into ransomware behavior and a corpus for future study of ransomware cybercriminal activity.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。