{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,24]],"date-time":"2026-07-24T17:36:30Z","timestamp":1784914590929,"version":"3.55.0"},"reference-count":55,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2022,3,1]],"date-time":"2022-03-01T00:00:00Z","timestamp":1646092800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,3,1]],"date-time":"2022-03-01T00:00:00Z","timestamp":1646092800000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,3,1]],"date-time":"2022-03-01T00:00:00Z","timestamp":1646092800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,3,1]],"date-time":"2022-03-01T00:00:00Z","timestamp":1646092800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Netw. Serv. Manage."],"published-print":{"date-parts":[[2022,3]]},"DOI":"10.1109\/tnsm.2021.3112056","type":"journal-article","created":{"date-parts":[[2021,9,13]],"date-time":"2021-09-13T20:44:07Z","timestamp":1631565847000},"page":"19-36","source":"Crossref","is-referenced-by-count":41,"title":["On Ransomware Family Attribution Using Pre-Attack Paranoia Activities"],"prefix":"10.1109","volume":"19","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3843-8708","authenticated-orcid":false,"given":"Ricardo Misael Ayala","family":"Molina","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2811-3536","authenticated-orcid":false,"given":"Sadegh","family":"Torabi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Khaled","family":"Sarieddine","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8040-4635","authenticated-orcid":false,"given":"Elias","family":"Bou-Harb","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7224-7940","authenticated-orcid":false,"given":"Nizar","family":"Bouguila","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3161-1846","authenticated-orcid":false,"given":"Chadi","family":"Assi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","year":"2021","journal-title":"Text Classification Using KNN With Different Feature Selection Methods"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLC.2007.4370742"},{"key":"ref33","author":"afianian","year":"2018","journal-title":"Malware dynamic analysis evasion techniques A survey"},{"key":"ref32","year":"2021","journal-title":"Evasion Techniques"},{"key":"ref31","first-page":"88","article-title":"Dynamic malware analysis in the modern era—A state of the art survey","volume":"52","author":"or-meir","year":"2021","journal-title":"ACM Comput Surv"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-39235-1_3"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/Trustcom.2015.375"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/s41133-020-00032-0"},{"key":"ref35","first-page":"8","article-title":"Text classification using KNN with different features selection methods","volume":"8","author":"jodha","year":"2018","journal-title":"Int J Res Publ"},{"key":"ref34","doi-asserted-by":"crossref","first-page":"1457","DOI":"10.1109\/TKDE.2006.180","article-title":"Some effective techniques for Naive Bayes text classification","volume":"18","author":"kim","year":"2006","journal-title":"IEEE Trans Knowl Data Eng"},{"key":"ref28","year":"2019","journal-title":"Averting Ransomware Epidemics in Corporate Networks With Windows Defender ATP"},{"key":"ref27","author":"loeb","year":"2021","journal-title":"Cerber Ransomware Owns the Market"},{"key":"ref29","author":"johnson","year":"2021","journal-title":"Major Operating Systems Targeted by Ransomware 2020"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.01.001"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2945839"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3029806.3029825"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2879302"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2016.25"},{"key":"ref24","year":"2020","journal-title":"VirusTotal"},{"key":"ref23","year":"2020","journal-title":"Automated Malware Analysis"},{"key":"ref26","year":"2020","journal-title":"Malicialab\/Avclass"},{"key":"ref25","year":"2020","journal-title":"VirusShare"},{"key":"ref50","first-page":"1","article-title":"Effectiveness of random search in SVM hyperparameter tuning","author":"mantovani","year":"2015","journal-title":"Proc IEEE Int Joint Conf Neural Netw (IJCNN)"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-Companion.2019.00110"},{"key":"ref55","first-page":"625","article-title":"Transcend: Detecting concept drift in malware classification models","author":"jordaney","year":"2017","journal-title":"Proc 26th USENIX Security Symp (USENIX Security)"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/3371924"},{"key":"ref53","first-page":"47","article-title":"DroidEvolver: Selfevolving Android malware detection system","author":"xu","year":"2019","journal-title":"Proc IEEE Eur Symp Security Privacy (EuroS&P)"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417291"},{"key":"ref10","year":"2021","journal-title":"27 Shocking Ransomware Statistics That Every It Pro Needs to Know"},{"key":"ref11","first-page":"136","article-title":"Ransomware, threat and detection techniques: A review","volume":"19","author":"kok","year":"2019","journal-title":"Int J Comput Sci Netw Security"},{"key":"ref40","year":"2021","journal-title":"A Clustering-Based KNN Improved Algorithm CLKNN for Text Classification"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2019.09.025"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00033"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICACCI.2017.8125850"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom\/BigDataSE.2018.00224"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2018.07.052"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ICC40277.2020.9149005"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3313391"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2019.00020"},{"key":"ref4","year":"2020","journal-title":"Fbi Director Sees ‘Parallels’ Between Ransomware Threat And 9\/11"},{"key":"ref3","year":"2020","journal-title":"What Are the Different Types of Ransomware?"},{"key":"ref6","author":"salama","year":"2020","journal-title":"Several Hospitals Targeted in New Wave of Ransomware Attacks"},{"key":"ref5","author":"cohen","year":"2021","journal-title":"Four Key Takeaways on the U S Government Response to the Pipeline Ransomware Attack"},{"key":"ref8","year":"2020","journal-title":"2020 Ransomware Statistics Data & Trends"},{"key":"ref7","year":"2020","journal-title":"Ransomware Statistics for 2020 Q1 Report"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3331076.3331111"},{"key":"ref9","author":"freeze","year":"2020","journal-title":"Global ransomware damage costs predicted to reach $20 billion (usd) by 2021"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3308558.3313642"},{"key":"ref45","author":"zhou","year":"2015","journal-title":"A c-lstm neural network for text classification"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/s12652-018-0803-6"},{"key":"ref47","year":"2021","journal-title":"Keras Documentation RMSPROP"},{"key":"ref42","first-page":"18","article-title":"An improved k-nearest neighbor classification using genetic algorithm","volume":"7","author":"suguna","year":"2010","journal-title":"Int J Comput Sci"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2012.02.068"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/72.641457"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/S1352-2310(97)00447-0"}],"container-title":["IEEE Transactions on Network and Service Management"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/4275028\/9732399\/9536608-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/4275028\/9732399\/09536608.pdf?arnumber=9536608","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,25]],"date-time":"2022-04-25T20:37:26Z","timestamp":1650919046000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9536608\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,3]]},"references-count":55,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tnsm.2021.3112056","relation":{},"ISSN":["1932-4537","2373-7379"],"issn-type":[{"value":"1932-4537","type":"electronic"},{"value":"2373-7379","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,3]]}}}