Quarterly journal published in SPbPU
and edited by prof. Dmitry Zegzhda
and edited by prof. Dmitry Zegzhda
Peter the Great St. Petersburg Polytechnic University
Institute of computer sciences and technologies
information security of computer systems
Institute of computer sciences and technologies
information security of computer systems
Information Security Problems. Computer Systems
Published since 1999.
ISSN 2071-8217
ISSN 2071-8217
USING ENTROPY METRICS TO DETECT DATA INTEGRITY ATTACKS IN REAL-TIME
T. A. Bondarenko1, T. D. Ovasapyan1, A. A. Piskov1
Annotation: Existing methods of detecting attacks on data integrity on file systems are investigated. A method of detecting such attacks based on the use of several entropy metrics is proposed. The efficiency of the proposed method is evaluated on the example of detection of existing ransomware.
Keywords: Data integrity, entropy, dynamic analysis, ransomware, encryptor, driver filter
Pages 48–57