VIRTUAL FILE HONEY POTS FOR COMPUTING SYSTEMS BEHAVIOR-BASED PROTECTION AGAINST RANSOMWARE ATTACKS

Abstract: systems and methods for ransomware protection in advanced injection-based attacks. events from a driver are analyzed to identify a potentially malicious actor. a confidence level is calculated for the potentially malicious actor identification to weigh the probability that the actor is malware or a source of malware. behavior associated with the potentially malicious actor can be collected, if it is likely that the potentially malicious actor is associated with malware, such as if the confidence level is over a predetermined threshold. subsequently, one or more virtual honeypots are generated for the suspicious processes and the response to the virtual honeypots is included in anti-ransomware heuristic analysis.

Inventor(s): Vladimir Strogov, Aliaksei Dodz, Oleg Ishanov, Serg Bell, Stanislav Protasov

CPC Classification: G06F21/53 (by executing in a restricted environment, e.g. sandbox or secure virtual machine)

Search for rejections for patent application number 20250173423