{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,9]],"date-time":"2026-03-09T13:31:35Z","timestamp":1773063095799,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":54,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,9,16]],"date-time":"2024-09-16T00:00:00Z","timestamp":1726444800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-sa\/4.0\/"}],"funder":[{"name":"N\/A"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,9,16]]},"DOI":"10.1145\/3688351.3689163","type":"proceedings-article","created":{"date-parts":[[2024,9,16]],"date-time":"2024-09-16T06:19:50Z","timestamp":1726467590000},"page":"118-131","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["WannaLaugh: A Configurable Ransomware Emulator - Learning to Mimic Malicious Storage Traces"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2979-5946","authenticated-orcid":false,"given":"Dionysios","family":"Diamantopoulos","sequence":"first","affiliation":[{"name":"IBM Research Europe - Z\u00fcrich Lab, S\u00e4umerstrasse 4, R\u00fcschlikon, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6162-3741","authenticated-orcid":false,"given":"Roman","family":"Pletka","sequence":"additional","affiliation":[{"name":"IBM Research Europe - Z\u00fcrich Lab, S\u00e4umerstrasse 4, R\u00fcschlikon, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-7708-6224","authenticated-orcid":false,"given":"Slavisa","family":"Sarafijanovic","sequence":"additional","affiliation":[{"name":"IBM Research Europe - Z\u00fcrich Lab, S\u00e4umerstrasse 4, R\u00fcschlikon, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4625-8819","authenticated-orcid":false,"given":"A.L. Narasimha","family":"Reddy","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, Texas A&M University, College Station, Texas, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5084-6651","authenticated-orcid":false,"given":"Haris","family":"Pozidis","sequence":"additional","affiliation":[{"name":"IBM Research Europe - Z\u00fcrich Lab, S\u00e4umerstrasse 4, R\u00fcschlikon, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,9,16]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"X-Force threat intelligence index","year":"2024","unstructured":"IBM-Security. X-Force threat intelligence index, 2024. URL https:\/\/www.ibm.com\/reports\/threat-intelligence. Accessed: 11.03.2024."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/3479393"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2021.3064259"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-022-00602-w"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/IOTSMS48152.2019.8939214"},{"key":"e_1_3_2_1_6_1","volume-title":"The Future of Memory and Storage Summit (FMS)","author":"Pletka Roman","year":"2024","unstructured":"Roman Pletka, Dionysios Diamantopoulos, Nicolas Reategui, Haris Pozidis, Yves Santos, and Andrew Walls. Building efficient ml models for ransomware detection in storage systems. In The Future of Memory and Storage Summit (FMS), 2024."},{"key":"e_1_3_2_1_7_1","first-page":"687","volume-title":"18th USENIX Symposium on Operating Systems Design and Implementation (OSDI 24)","author":"Wang Zhongyu","year":"2024","unstructured":"Zhongyu Wang, Yaheng Song, Erci Xu, Haonan Wu, Guangxun Tong, Shizhuo Sun, Haoran Li, Jincheng Liu, Lijun Ding, Rong Liu, Jiaji Zhu, and Jiesheng Wu. Ransom access memories: Achieving practical ransomware protection in cloud with DeftPunk. In 18th USENIX Symposium on Operating Systems Design and Implementation (OSDI 24), pages 687--702, Santa Clara, CA, July 2024. USENIX Association. ISBN 978-1-939133-40-3. URL https:\/\/www.usenix.org\/conference\/osdi24\/presentation\/wang-zhongyu."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/IC2E48712.2020.00025"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-41284-4_8"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1609.03020"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.3390\/app12010172"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2016.2536605"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-022-19443-7"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3129676.3129704"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/NPSEC.2010.5634444"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-63095-9_7"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCT53315.2021.9711906"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICMEAS52683.2021.9692402"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/CCWC54503.2022.9720869"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.3390\/s22051837"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2022.100529"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3180465.3180467"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-73951-9_5"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSR57506.2023.10225001"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.fsidi.2021.301314"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/1508293.1508311"},{"key":"e_1_3_2_1_27_1","unstructured":"Nextronsystems quickbuck. URL https:\/\/github.com\/NextronSystems\/ransomware-simulator. Accessed: 29.01.2024."},{"key":"e_1_3_2_1_28_1","unstructured":"Leomatias ransomware-simulator. URL https:\/\/github.com\/leomatias\/Ransomware-Simulator. Accessed: 29.01.2024."},{"key":"e_1_3_2_1_29_1","unstructured":"JoelGMSec PSRansom. URL https:\/\/github.com\/JoelGMSec\/PSRansom. Accessed: 29.01.2024."},{"key":"e_1_3_2_1_30_1","unstructured":"Tarc\u00edsio Marinho. Python gonnacry. URL https:\/\/github.com\/tarcisio-marinho\/GonnaCry. Accessed: 25.03.2023."},{"key":"e_1_3_2_1_31_1","unstructured":"lawndoc. Ransim. URL https:\/\/github.com\/lawndoc\/RanSim. Accessed: 25.03.2023."},{"key":"e_1_3_2_1_32_1","unstructured":"Shinolocker. URL https:\/\/shinolocker.com. Accessed: 29.01.2024."},{"key":"e_1_3_2_1_33_1","unstructured":"Ort0x36. Dimorf. URL https:\/\/github.com\/Ort0x36\/Dimorf. Accessed: 17.03.2024."},{"key":"e_1_3_2_1_34_1","unstructured":"Carbonsec ransomware readiness. URL https:\/\/www.carbonsec.com\/services\/ransomware-readiness. Accessed: 29.01.2024."},{"key":"e_1_3_2_1_35_1","unstructured":"spin.ai ransomware-simulator. URL https:\/\/spin.ai\/ransomware-simulator. Accessed: 29.01.2024."},{"key":"e_1_3_2_1_36_1","unstructured":"KnowBe4 Inc. Knowbe4 ransim simulator. URL https:\/\/www.knowbe4.com\/ransomware-simulator. Accessed: 29.01.2024."},{"key":"e_1_3_2_1_37_1","unstructured":"bstnbuck. Itssoeasy. URL https:\/\/github.com\/bstnbuck\/ItsSoEasy. Accessed: 12.02.2024."},{"key":"e_1_3_2_1_38_1","unstructured":"sakshatshinde\/Wannalaugh. URL https:\/\/github.com\/sakshatshinde\/WannaLaugh. Accessed: 15.06.2024."},{"key":"e_1_3_2_1_39_1","unstructured":"Wannalaugh ransomware emulator. URL https:\/\/github.com\/ransomware-detection\/wannalaugh. Accessed: 22.08.2024."},{"key":"e_1_3_2_1_40_1","unstructured":"Acronis. Taking a deep dive into Sodinokibi ransomware. URL https:\/\/www.acronis.com\/en-us\/cyber-protection-center\/posts\/sodinokibi-ransomware\/. Accessed: 25.03.2023."},{"key":"e_1_3_2_1_41_1","unstructured":"Trend Micro Research. Ransomware spotlight - Black Basta. URL https:\/\/www.trendmicro.com\/vinfo\/us\/security\/news\/ransomware-spotlight\/ransomware-spotlight-blackbasta. Accessed: 15.03.2023."},{"key":"e_1_3_2_1_42_1","unstructured":"Unit42. LockBit 2.0: How this RaaS operates and how to protect against it. URL https:\/\/unit42.paloaltonetworks.com\/lockbit-2-ransomware\/. Accessed: 20.03.2023."},{"key":"e_1_3_2_1_43_1","volume-title":"X-Force threat intelligence index malware analysis report LockFile malware profile","author":"Security IBM","year":"2022","unstructured":"IBM Security. X-Force threat intelligence index malware analysis report LockFile malware profile. 2022. URL https:\/\/exchange.xforce.ibmcloud.com\/malware-analysis\/guid:674f5949970a487028354a309492ac0c."},{"key":"e_1_3_2_1_44_1","unstructured":"Secureworks. WCry ransomware analysis. URL https:\/\/www.secureworks.com\/research\/wcry-ransomware-analysis. Accessed: 20.03.2023."},{"key":"e_1_3_2_1_45_1","unstructured":"Packt SecurityPro. Decoding Conti. URL https:\/\/security.packt.com\/conti\/. Accessed: 15.03.2023."},{"issue":"1","key":"e_1_3_2_1_46_1","article-title":"A flexible framework for file system benchmarking. log","volume":"41","author":"Tarasov Vasily","year":"2016","unstructured":"Vasily Tarasov, Erez Zadok, and Spencer Shepler. Filebench: A flexible framework for file system benchmarking. login Usenix Mag., 41(1), 2016. URL https:\/\/www.usenix.org\/publications\/login\/spring2016\/tarasov.","journal-title":"Usenix Mag."},{"key":"e_1_3_2_1_47_1","first-page":"561","volume-title":"13th USENIX Symposium on Operating Systems Design and Implementation (OSDI 18)","author":"Moritz Philipp","year":"2018","unstructured":"Philipp Moritz, Robert Nishihara, Stephanie Wang, Alexey Tumanov, Richard Liaw, Eric Liang, Melih Elibol, Zongheng Yang, William Paul, Michael I. Jordan, and Ion Stoica. Ray: A distributed framework for emerging AI applications. In 13th USENIX Symposium on Operating Systems Design and Implementation (OSDI 18), pages 561--577, Carlsbad, CA, October 2018. USENIX Association. ISBN 978-1-939133-08-3. URL https:\/\/www.usenix.org\/conference\/osdi18\/presentation\/moritz."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2009.06.016"},{"key":"e_1_3_2_1_49_1","volume-title":"Proceedings of Ottawa Linux Symposium (OLS","author":"Prasad Vara","year":"2005","unstructured":"Vara Prasad, William Cohen, Frank Ch. Eigler, Martin Hunt, and Brad Chen Jim Keniston. Locating system problems using dynamic instrumentation. In Proceedings of Ottawa Linux Symposium (OLS, 2005. URL https:\/\/sourceware.org\/systemtap\/systemtap-ols.pdf."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-020-10139-6"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-91086-4_1"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/4235.996017"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2016.12.003"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3128024"}],"event":{"name":"SYSTOR '24: The 17th ACM International Systems and Storage Conference","location":"Virtual Israel","acronym":"SYSTOR '24","sponsor":["SIGOPS ACM Special Interest Group on Operating Systems","Technion Israel Institute of Technology"]},"container-title":["Proceedings of the 17th ACM International Systems and Storage Conference on ZZZ"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3688351.3689163","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3688351.3689163","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,26]],"date-time":"2025-08-26T19:52:50Z","timestamp":1756237970000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3688351.3689163"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,9,16]]},"references-count":54,"alternative-id":["10.1145\/3688351.3689163","10.1145\/3688351"],"URL":"https:\/\/doi.org\/10.1145\/3688351.3689163","relation":{},"subject":[],"published":{"date-parts":[[2024,9,16]]},"assertion":[{"value":"2024-09-16","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}