A cross-border community for researchers with openness, equality and inclusion

ABSTRACT LIBRARY

Deception-Based Proactive Defense Against Ransomware in VMWare ESXI Systems

Publisher: IEEE

Authors: Nguyen Anh-Nhat, FPT University Tran Thi Thanh Tam, FPT University Tran Hai-Ha, FPT University Do Minh-Quan, FPT University Nguyen Nhat-Nam, FPT University Trinh Tung-Son, FPT University Luu Minh-Tri, FPT University Tung-Son Ngo, FPT University

  • Favorite
  • Share:

Abstract:

This study focuses on the vulnerabilities and attack vectors connected with ransomware in Elastic Sky X integrated (ESXi) settings. We offer a novel technique to address these concerns by mimicking an ESXi environment, focusing on honeypot deployment and monitoring behaviours. Our strategy is creating a controlled emulation of ESXi in which we place honeypots to lure and capture ransomware activity. Furthermore, we use sophisticated monitoring methods to watch and evaluate ransomware behaviours in this simulated environment. Our approach’s effectiveness is tested using the simulated ESXi environment’s detection and response capabilities. The findings show that using honeypots in conjunction with careful behavioural monitoring can considerably improve the identification and mitigation of ransomware threats in virtualized environments.

Keywords: VMWare ESXi, Ransomware, Deception, Behavioral Monitoring

Published in: 2024 Asian Conference on Communication and Networks (ASIANComNet)

Date of Publication: --

DOI: -

Publisher: IEEE