{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,24]],"date-time":"2026-07-24T17:36:31Z","timestamp":1784914591485,"version":"3.55.0"},"reference-count":56,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"DOI":"10.13039\/100009226","name":"U.S. National Security Agency","doi-asserted-by":"publisher","award":["H98230-21-1-0171"],"award-info":[{"award-number":["H98230-21-1-0171"]}],"id":[{"id":"10.13039\/100009226","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100009226","name":"U.S. National Security Agency","doi-asserted-by":"publisher","award":["FA8075-18-D-0008\/FA807520F0060"],"award-info":[{"award-number":["FA8075-18-D-0008\/FA807520F0060"]}],"id":[{"id":"10.13039\/100009226","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/access.2023.3279819","type":"journal-article","created":{"date-parts":[[2023,5,24]],"date-time":"2023-05-24T17:45:18Z","timestamp":1684950318000},"page":"51395-51407","source":"Crossref","is-referenced-by-count":29,"title":["Detection of Ransomware Attacks Using Processor and Disk Usage Data"],"prefix":"10.1109","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6645-5468","authenticated-orcid":false,"given":"Kumar","family":"Thummapudi","sequence":"first","affiliation":[{"name":"Department of Computer Science, The University of Texas at San Antonio, San Antonio, TX, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Palden","family":"Lama","sequence":"additional","affiliation":[{"name":"Department of Computer Science, The University of Texas at San Antonio, San Antonio, TX, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9195-777X","authenticated-orcid":false,"given":"Rajendra V.","family":"Boppana","sequence":"additional","affiliation":[{"name":"Department of Computer Science, The University of Texas at San Antonio, San Antonio, TX, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196515"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3403943"},{"key":"ref56","year":"2023","journal-title":"Block I\/O Tuning"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/HST.2019.8740837"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.7717\/peerj-cs.361"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-00296-0_5"},{"key":"ref52","first-page":"2825","article-title":"Scikit-learn: Machine learning in Python","volume":"12","author":"pedregosa","year":"2011","journal-title":"J Mach Learn Res"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00021"},{"key":"ref55","year":"2021","journal-title":"Sensitivity and specificity"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11379-1_6"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330648"},{"key":"ref17","author":"thummapudi","year":"2022","journal-title":"IO 41 events 5 rounds"},{"key":"ref16","author":"thummapudi","year":"2022","journal-title":"HPC 41 events 5 rounds"},{"key":"ref19","author":"thummapudi","year":"2022","journal-title":"Io 5 events 7 rounds"},{"key":"ref18","author":"thummapudi","year":"2022","journal-title":"HPC 5 events 7 rounds"},{"key":"ref51","year":"2023","journal-title":"System Programming Guide"},{"key":"ref50","year":"2021","journal-title":"VirusShare"},{"key":"ref46","first-page":"219","article-title":"Lessons learned from the chameleon testbed","author":"keahey","year":"2020","journal-title":"Proc USENIX Annu Tech Conf"},{"key":"ref45","year":"2022","journal-title":"LIKWID Performance Tools"},{"key":"ref48","year":"2023","journal-title":"Ninite"},{"key":"ref47","year":"2021","journal-title":"Alexa Top Websites"},{"key":"ref42","first-page":"2017","article-title":"Detecting large integer arithmetic for defense against crypto ransomware","volume":"558","author":"kiraz","year":"2017","journal-title":"Cryptology-eprint-archive"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053035"},{"key":"ref44","year":"2022","journal-title":"Linux Profiling with Performance Counters"},{"key":"ref43","year":"2022","journal-title":"What Systems Have You Seen Infected by Ransomware?"},{"key":"ref49","year":"2023","journal-title":"Libvirt Virsh Tool Manual"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_6"},{"key":"ref7","article-title":"RanStop: A hardware-assisted runtime crypto-ransomware detection technique","author":"pundir","year":"2020","journal-title":"arXiv 2011 12248"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/2508148.2485970"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/IWCDM.2011.17"},{"key":"ref3","year":"2020","journal-title":"What is Signature Based Malware Detection"},{"key":"ref6","author":"loman","year":"2021","journal-title":"Lockfile Ransomware’s Box of Tricks Intermittent Encryption and Evasion"},{"key":"ref5","year":"2021","journal-title":"Polymorphic Malware"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/ISCISC.2015.7387902"},{"key":"ref35","first-page":"219","article-title":"On deception-based protection against cryptographic ransomware","author":"genc","year":"2019","journal-title":"Detection of Intrusions and Malware and Vulnerability Assessment"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-36802-9_20"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2017.10.012"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1155\/2016\/2946735"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2016.46"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2989051"},{"key":"ref33","doi-asserted-by":"crossref","first-page":"465","DOI":"10.1016\/j.procs.2016.08.072","article-title":"Experimental analysis of ransomware on windows and Android platforms: Evolution and characterization","volume":"94","author":"zavarsky","year":"2016","journal-title":"Proc Journal of Computer Science"},{"key":"ref32","article-title":"Automated dynamic analysis of ransomware: Benefits, limitations and use for detection","author":"sgandurra","year":"2016","journal-title":"arXiv 1609 03020"},{"key":"ref2","author":"braue","year":"2022","journal-title":"Ransomware Damage Costs"},{"key":"ref1","year":"2022","journal-title":"Ransomware victimization rate 2022"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-93411-2_11"},{"key":"ref38","first-page":"1","article-title":"Ransomware’s early mitigation mechanisms","author":"moussaileb","year":"2018","journal-title":"Proc 13th Int Conf Availability Rel Secur"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2931136"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-48965-0_32"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/TETC.2017.2756908"},{"key":"ref25","first-page":"127","article-title":"Behaviour based ransomware detection","volume":"58","author":"chew","year":"0","journal-title":"Proc Int Conf Comput Their Appl"},{"key":"ref20","author":"thummapudi","year":"2023","journal-title":"Scripts to reproduce results"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66332-6_5"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/8933681"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-20550-2_1"},{"key":"ref27","first-page":"757","article-title":"UNVEIL: A large-scale, automated approach to detecting ransomware (keynote)","author":"kharaz","year":"2017","journal-title":"Proc IEEE 24th Int Conf Softw Anal Evol Reengineering (SANER)"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991110"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/10005208\/10132856.pdf?arnumber=10132856","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,6,19]],"date-time":"2023-06-19T18:23:40Z","timestamp":1687199020000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10132856\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":56,"URL":"https:\/\/doi.org\/10.1109\/access.2023.3279819","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}