dptCry: an approach to decrypting ransomware WannaCry based on API hooking-Reference-Cited by-同舟云学术

dptCry: an approach to decrypting ransomware WannaCry based on API hooking

Published:2019-12 Issue:3-4 Volume:2 Page:207-216
ISSN:2520-8462
Container-title:CCF Transactions on Networking
language:en
Short-container-title:CCF Trans. Netw.

Author:

Cheng Guang^ORCID,Guo Chunsheng,Tang Yongning

Funder

Equipment Advance Research Program

National Natural Science Foundation of China

National Key R&D Plan Program of China

Publisher

Springer Science and Business Media LLC

Subject

General Earth and Planetary Sciences,General Environmental Science

Link

http://link.springer.com/content/pdf/10.1007/s42045-019-00024-8.pdf

Reference17 articles.

1. Antiy, C.E.R.T.: A brief history of ransomware. China Inf. Secur. 4, 50–58 (2016)

2. Guinet, A.: A WannaCry flaw could help some victim get files back[EB/OL]. https://www.wired.com/2017/05/wannacry-flaw-help-windows-xp-victims-get-files-back/ (2019)

3. Hoglund, G., Butler, J.: Rootkits: Subverting the Windows kernel. Addison-Wesley Professional, Boston (2006)

4. Jianzhang, Cai, Qiang, Wei, Yuefei, Zhu: Identification of encrypted function in malicious software. J. Comput. Appl. 33(11), 3239–3243 (2013)

5. Kesheng, L., Zhongshou, W.: The analysis of API Hook central technique. Netw. Secur. Technol. Appl. 11, 48–50 (2006)

Cited by 2 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Research on Intelligent Vulnerability Identification Method for Power Information System;2023 IEEE 11th Joint International Information Technology and Artificial Intelligence Conference (ITAIC);2023-12-08

2. A method for decrypting data infected with Hive ransomware;Journal of Information Security and Applications;2022-12