{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,9]],"date-time":"2026-04-09T05:02:23Z","timestamp":1775710943519,"version":"3.50.1"},"reference-count":17,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,3,19]],"date-time":"2026-03-19T00:00:00Z","timestamp":1773878400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,3,19]],"date-time":"2026-03-19T00:00:00Z","timestamp":1773878400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,3,19]]},"DOI":"10.1109\/isdfs69419.2026.11459079","type":"proceedings-article","created":{"date-parts":[[2026,4,8]],"date-time":"2026-04-08T20:01:51Z","timestamp":1775678511000},"page":"1-6","source":"Crossref","is-referenced-by-count":0,"title":["Temporal Behavioral Archetypes of Ransomware in Active Directory Environments"],"prefix":"10.1109","author":[{"given":"Prajna","family":"Bhandary","sequence":"first","affiliation":[{"name":"University of Maryland Baltimore County (UMBC),Computer Science and Electrical Engineering Department,Baltimore,MD,USA,21250"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Charles","family":"Nicholas","sequence":"additional","affiliation":[{"name":"University of Maryland Baltimore County (UMBC),Computer Science and Electrical Engineering Department,Baltimore,MD,USA,21250"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3514229"},{"key":"ref2","article-title":"Ransomware: Recent Advances, Analysis, Challenges and Defense Approaches","author":"Beaman","year":"2021","journal-title":"Frontiers in Cybersecurity"},{"key":"ref3","article-title":"A Survey on Ransomware Threats: Contrasting Static and Dynamic Analysis Strategies","author":"Kang","year":"2023","journal-title":"Preprint"},{"key":"ref4","first-page":"359","article-title":"Using Dynamic Time Warping to Find Patterns in Time Series","author":"Berndt","year":"1994","journal-title":"Proc. AAAI Workshop on Knowledge Discovery in Databases"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-37456-2_14"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-025-12948-x"},{"key":"ref7","article-title":"Security Monitoring and Misconfiguration Risks in Active Directory Environments","author":"Binduf","year":"2020","journal-title":"Journal of Network and Systems Management"},{"key":"ref8","article-title":"Strange Behavior Inspection (SBI): Detecting Credential Dumping Attacks in Active Directory","author":"Mohamed","year":"2025","journal-title":"International Journal of Network Security"},{"key":"ref9","article-title":"RANKER: Early Ransomware Detection Through Kernel-Level Behavioral Analysis","volume-title":"Proc. ACM Asia Conference on Computer and Communications Security (ASIACCS)","author":"Kim"},{"key":"ref10","article-title":"Real-Time Ransomware Detection Based on Host System Utilizing Machine Learning and Windowing Threshold","author":"Khan","year":"2022","journal-title":"IEEE Access"},{"key":"ref11","article-title":"Beyond Labeling: Using Clustering Techniques for Malware Behavioral Analysis","author":"Nadeem","year":"2021","journal-title":"Advances in Information and Communication, Springer"},{"key":"ref12","first-page":"23","article-title":"Ransomware Evolution: Unveiling Patterns Using HDBSCAN","volume-title":"Conference on Applications of Machine Learning in Information Security (CAMLIS), poster session","author":"Bhandary","year":"2024"},{"key":"ref13","article-title":"Alignment-Based Anomaly Detection in Network Traffic Using Dynamic Time Warping","volume-title":"Proc. IEEE International Conference on Communications (ICC)","author":"Diab"},{"key":"ref14","article-title":"Classification of Malware Using Dynamic Time Warping on Behavioral Sequences","volume-title":"Proc. International Conference on Information Systems Security (ICISS)","author":"Naval"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ISDFS65363.2025.11012104"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ACSACW69556.2025.00058"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1002\/SERIES1345"}],"event":{"name":"2026 14th International Symposium on Digital Forensics and Security (ISDFS)","location":"Boston, MA, USA","start":{"date-parts":[[2026,3,19]]},"end":{"date-parts":[[2026,3,20]]}},"container-title":["2026 14th International Symposium on Digital Forensics and Security (ISDFS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11458844\/11458909\/11459079.pdf?arnumber=11459079","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,9]],"date-time":"2026-04-09T04:42:34Z","timestamp":1775709754000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11459079\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3,19]]},"references-count":17,"URL":"https:\/\/doi.org\/10.1109\/isdfs69419.2026.11459079","relation":{},"subject":[],"published":{"date-parts":[[2026,3,19]]}}}