Análise de ataques de ransomware: identificação e medidas de segurança efetivas

Abstract

This work addresses the phenomenon of ransomware, a type of cyberattack that uses malicious software to encrypt data on a system or network, making it inaccessible to the legitimate user and demanding a ransom for the release of the data. The main objective is to analyze identification strategies and effective security measures to protect organizations and individuals against ransomware attacks, ensuring the integrity and availability of critical data. The research explores different types of ransomwares, such as Crypto Ransomware, Locker Ransomware, Scareware, and Doxware, as well as business models like Ransomware-as-a-Service (RaaS). Notable attack cases, such as WannaCry, Petya/NotPetya, and GandCrab, were analyzed to identify behavioral patterns and techniques used by attackers. The proposed security measures include privilege restrictions, network segmentation, traffic monitoring, and anomaly behavior analysis, aiming to prevent and mitigate the impacts of these attacks. The study hopes to contribute to the improvement of security policies in organizations and the development of more robust technological solutions against ransomware.