{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T08:52:17Z","timestamp":1743065537035,"version":"3.40.3"},"publisher-location":"Singapore","reference-count":21,"publisher":"Springer Nature Singapore","isbn-type":[{"type":"print","value":"9789819605750"},{"type":"electronic","value":"9789819605767"}],"license":[{"start":{"date-parts":[[2024,11,27]],"date-time":"2024-11-27T00:00:00Z","timestamp":1732665600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,11,27]],"date-time":"2024-11-27T00:00:00Z","timestamp":1732665600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-981-96-0576-7_16","type":"book-chapter","created":{"date-parts":[[2024,11,26]],"date-time":"2024-11-26T06:47:26Z","timestamp":1732603646000},"page":"204-215","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["A Lightweight Detection of\u00a0Sequential Patterns in\u00a0File System Events During Ransomware Attacks"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0487-0615","authenticated-orcid":false,"given":"Arash","family":"Mahboubi","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6851-7717","authenticated-orcid":false,"given":"Hang Thanh","family":"Bui","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9285-9917","authenticated-orcid":false,"given":"Hamed","family":"Aboutorab","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6981-7367","authenticated-orcid":false,"given":"Khanh","family":"Luong","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6353-8359","authenticated-orcid":false,"given":"Seyit","family":"Camtepe","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9969-7682","authenticated-orcid":false,"given":"Keyvan","family":"Ansari","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,11,27]]},"reference":[{"key":"16_CR1","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"240","DOI":"10.1007\/978-3-030-88418-5_12","volume-title":"Computer Security \u2013 ESORICS 2021","author":"ME Ahmed","year":"2021","unstructured":"Ahmed, M.E., Kim, H., Camtepe, S., Nepal, S.: Peeler: profiling Kernel-level events to detect ransomware. In: Bertino, E., Shulman, H., Waidner, M. (eds.) ESORICS 2021. LNCS, vol. 12972, pp. 240\u2013260. Springer, Cham (2021). https:\/\/doi.org\/10.1007\/978-3-030-88418-5_12"},{"key":"16_CR2","doi-asserted-by":"publisher","unstructured":"Anand, P.M., Charan, P.V.S., Shukla, S.K.: Hiper - early detection of a ransomware attack using hardware performance counters. Digital Threats 4(3), 1\u201324 (2023). https:\/\/doi.org\/10.1145\/3608484","DOI":"10.1145\/3608484"},{"key":"16_CR3","unstructured":"Bridges, R.A., Glass-Vanderlan, T.R., Jones, C.D., Iannacone, M.D.: A survey of anomaly detection for cyber security. In: Proceedings of the 28th Annual Conference on Computer Security Applications, pp. 99\u2013108 (2012)"},{"key":"16_CR4","unstructured":"Bridges, R.A., Iannacone, M.D., Goodall, J.R., Beaver, J.M.: How do information security workers use host data? a summary of interviews with security analysts. arXiv preprint arXiv:1812.02867 (2018)"},{"key":"16_CR5","doi-asserted-by":"publisher","unstructured":"Ciaramella, G., Iadarola, G., Martinelli, F., et al.: Explainable ransomware detection with deep learning techniques. J. Comput. Virol. Hack Tech. 20, 317\u2013330 (2024). https:\/\/doi.org\/10.1007\/s11416-022-00429-0","DOI":"10.1007\/s11416-022-00429-0"},{"key":"16_CR6","doi-asserted-by":"publisher","unstructured":"Singh, A., Mushtaq, Z., Abosaq, H.A., Mursal, S.N.F., Irfan, M., Nowakowski, G.: Enhancing ransomware attack detection using transfer learning and deep learning ensemble models on cloud-encrypted data. Electronics 12, 3899 (2023). https:\/\/doi.org\/10.3390\/electronics12183899","DOI":"10.3390\/electronics12183899"},{"key":"16_CR7","unstructured":"Hardy, N., Hu, W., Hu, W., Ragnhild, H.: Automated ransomware analysis: analyzing ransomware using machine learning. In: Proceedings of the 11th ACM on Asia Conference on Computer and Communications Security, pp. 609\u2013620 (2016)"},{"key":"16_CR8","doi-asserted-by":"crossref","unstructured":"Homayoun, S.M.M., Dehghantanha, A., Ahmadzadeh, M.R., Khayami, R., Karimipour, H.: Drthis: deep ransomware threat hunting and intelligence system at the fog layer. In: Proceedings of the International Conference on Fog Computing, pp. 147\u2013153 (2019)","DOI":"10.1016\/j.future.2018.07.045"},{"key":"16_CR9","doi-asserted-by":"publisher","unstructured":"Khalifa, Y., Mandic, D., Sejdi\u00c4\u2021, E.: A review of hidden Markov models and recurrent neural networks for event detection and localization in biomedical signals. Inf. Fusion 69, 52\u201372 (2021). https:\/\/doi.org\/10.1016\/j.inffus.2020.11.008","DOI":"10.1016\/j.inffus.2020.11.008"},{"key":"16_CR10","unstructured":"Kharaz, A., Arshad, S., Mulliner, C., Robertson, W., Kirda, E.: Unveil: a large-scale, automated approach to detecting ransomware. USENIX Security Symposium, pp. 757\u2013772 (2016)"},{"key":"16_CR11","unstructured":"Kharaz, A., Arshad, S., Mulliner, C., Robertson, W., Kirda, E.: UNVEIL: a large-scale, automated approach to detecting ransomware. In: 25th USENIX Security Symposium (USENIX Security 16), pp. 757\u2013772. USENIX Association, Austin (2016). https:\/\/www.usenix.org\/conference\/usenixsecurity16\/technical-sessions\/presentation\/kharaz"},{"key":"16_CR12","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"98","DOI":"10.1007\/978-3-319-66332-6_5","volume-title":"Research in Attacks, Intrusions, and Defenses","author":"A Kharraz","year":"2017","unstructured":"Kharraz, A., Kirda, E.: Redemption: real-time protection against ransomware at end-hosts. In: Dacier, M., Bailey, M., Polychronakis, M., Antonakakis, M. (eds.) RAID 2017. LNCS, vol. 10453, pp. 98\u2013119. Springer, Cham (2017). https:\/\/doi.org\/10.1007\/978-3-319-66332-6_5"},{"key":"16_CR13","doi-asserted-by":"publisher","first-page":"57","DOI":"10.1007\/978-3-030-67550-9_5","volume-title":"Mobile, Secure, and Programmable Networking","author":"A Mahboubi","year":"2021","unstructured":"Mahboubi, A., Ansari, K., Camtepe, S.: Using process mining to identify file system metrics impacted by ransomware execution. In: Bouzefrane, S., Laurent, M., Boumerdassi, S., Renault, E. (eds.) Mobile, Secure, and Programmable Networking, pp. 57\u201371. Springer, Cham (2021)"},{"key":"16_CR14","doi-asserted-by":"publisher","unstructured":"Mangalathu, S., Hwang, S.H., Jeon, J.S.: Failure mode and effects analysis of RC members based on machine-learning-based Shapley additive explanations (SHAP) approach. Eng. Struct. 219, 110927 (2020). https:\/\/doi.org\/10.1016\/j.engstruct.2020.110927","DOI":"10.1016\/j.engstruct.2020.110927"},{"key":"16_CR15","doi-asserted-by":"publisher","first-page":"114","DOI":"10.1007\/978-3-030-00470-5_6","volume-title":"Research in Attacks, Intrusions, and Defenses","author":"S Mehnaz","year":"2018","unstructured":"Mehnaz, S., Mudgerikar, A., Bertino, E.: Rwguard: a real-time detection system against cryptographic ransomware. In: Bailey, M., Holz, T., Stamatogiannakis, M., Ioannidis, S. (eds.) Research in Attacks, Intrusions, and Defenses, pp. 114\u2013136. Springer, Cham (2018)"},{"key":"16_CR16","doi-asserted-by":"publisher","unstructured":"Nguyen-Le, D.H., Tao, Q., Nguyen, V.H., Abdel-Wahab, M., Nguyen-Xuan, H.: A data-driven approach based on long short-term memory and hidden Markov model for crack propagation prediction. Eng. Fract. Mech. 235, 107085 (2020). https:\/\/doi.org\/10.1016\/j.engfracmech.2020.107085","DOI":"10.1016\/j.engfracmech.2020.107085"},{"key":"16_CR17","doi-asserted-by":"publisher","unstructured":"Olaimat, M.N., Aizaini\u00a0Maarof, M., Al-rimy, B.A.S.: Ransomware anti-analysis and evasion techniques: a survey and research directions. In: 2021 3rd International Cyber Resilience Conference (CRC), pp.\u00a01\u20136 (2021). https:\/\/doi.org\/10.1109\/CRC50527.2021.9392529","DOI":"10.1109\/CRC50527.2021.9392529"},{"key":"16_CR18","doi-asserted-by":"publisher","unstructured":"Oz, H., Aris, A., Levi, A., Uluagac, A.S.: A survey on ransomware: evolution, taxonomy, and defense solutions. ACM Comput. Surv. 54(11s), 1\u201337 (2022). https:\/\/doi.org\/10.1145\/3514229","DOI":"10.1145\/3514229"},{"key":"16_CR19","doi-asserted-by":"publisher","unstructured":"Sibi Chakkaravarthy, S., Sangeetha, D., Vaidehi, V.: A survey on malware analysis and mitigation techniques. Comput. Sci. Rev. 32,1\u201323 (2019). https:\/\/doi.org\/10.1016\/j.cosrev.2019.01.002","DOI":"10.1016\/j.cosrev.2019.01.002"},{"key":"16_CR20","doi-asserted-by":"crossref","unstructured":"Turcotte, M.J., Kent, A.D., Hash, C.: Unified host and network data set. ArXiv e-prints (2017)","DOI":"10.1142\/9781786345646_001"},{"key":"16_CR21","doi-asserted-by":"crossref","unstructured":"Xu, W., Huang, L., Fox, A., Patterson, D., Jordan, M.I.: Detecting large-scale system problems by mining console logs. In: Proceedings of the 22nd ACM Symposium on Operating Systems Principles, pp. 117\u2013132 (2009)","DOI":"10.1145\/1629575.1629587"}],"container-title":["Lecture Notes in Computer Science","Web Information Systems Engineering \u2013 WISE 2024"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-96-0576-7_16","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,26]],"date-time":"2024-11-26T08:30:51Z","timestamp":1732609851000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-96-0576-7_16"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,11,27]]},"ISBN":["9789819605750","9789819605767"],"references-count":21,"URL":"https:\/\/doi.org\/10.1007\/978-981-96-0576-7_16","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2024,11,27]]},"assertion":[{"value":"27 November 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"WISE","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Web Information Systems Engineering","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Doha","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Qatar","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2 December 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"5 December 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"wise2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/wise2024-qatar.com\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}