A Technology to Prevent Ransomware Attacks Based on Solid State Drives in LAN

doi:10.3969/j.issn.1671-1122.2019.09.015

Abstract

Abstract:

In order to alleviate the impact of ransomware in LAN, this paper proposes a SSD-based defense technology, which uses a host with a large-capacity SSD as a server, and uses network drive mapping technology to share with other hosts in the LAN to further utilize the solid state. Moreover, this paper utilized the out-of-place of the SSD and modified garbage collection for data backup, and a binary search method is proposed for data recovery. The experimental results of the prototype system show that this scheme can recover the data attacked by the ransomware quickly and effectively, and its impact of the read and write performance is samll.

Key words: Ransomware, SSD, LAN, data backup, data recovery

CLC Number:

TP309

Ming YIN, Shijie JIA. A Technology to Prevent Ransomware Attacks Based on Solid State Drives in LAN[J]. Netinfo Security, 2019, 19(9): 71-75.

Figures/Tables 3

References 10

[1]	CAS. China Institute of Electronic and Information Industry Development: Cyberspace Security Report 2017[EB/OL]. , 2018-1-22.
	中国科学院计算技术研究所.中国电子信息产业发展研究院:2017年度网络空间安全报告[EB/OL]. , 2018-1-22.
[2]	LUO Jianfei, FU Dongnan.Analysis of Computer Virus Epidemic in December 2018[J]. Netinfo Security, 2019, 19(2): 85.
	罗健菲,付东楠. 2018年12月计算机病毒疫情分析[J].信息网络安全,2019,19(2):85.
[3]	Wikipedia. WannaCry Ransomware Attack[EB/OL]. , 2019-4-17.
[4]	YOUNG A, YUNG M.Cryptovirology: Extortion-based Security Threats and Countermeasures[C]//IEEE. 1996 IEEE Symposium on Security and Privacy, May 6-8, 1996, Oakland, CA, USA. New Jersey: IEEE, 1996: 129-140.
[5]	JIA Shijie, XIA Luning, CHEN Bo, et al.DEFTL: Implementing Plausibly Deniable Encryption in Flash Translation Layer[C]//ACM. 2017 ACM SIGSAC Conference on Computer and Communications Security, October 30-November 3, 2019, Dallas, USA. New York: ACM, 2017: 2217-2229.
[6]	PINOLA M. How to Map a Network Drive in Windows 10[EB/OL]. , 2019-4-29.
[7]	WANG Peiying, JIA Shijie, CHEN Bo, et al.MimosaFTL: Adding Secure and Practical Ransomware Defense Strategy to Flash Translation Layer[C]//ACM. 9th ACM Conference on Data and Application Security and Privacy, March 25-27, 2019, Dallas, TX, USA. New York: ACM, 2019: 327-338.
[8]	Google Code. OpenNFM[EB/OL]., 2011-4-25.
[9]	Mantech. LPC-H3131[EB/OL]. , 2019-4-17.
[10]	Freecode. Fio[EB/OL]. , 2014-1-10.

方案	顺序读/KB/s	随机读/KB/s	顺序写/KB/s	随机写/KB/s
OpenNFM	1863	1398	923	701
本文方案	1849	1324	878	668

[1]	Chun GUO, Changqing CHEN, Guowei SHEN, Chaohui JIANG. A Ransomware Classification Method Based on Visualization [J]. Netinfo Security, 2020, 20(4): 31-39.
[2]	Zongping LÜ, Chundi ZHAO, Zhaojun GU, Jingxian ZHOU. Dynamic Detection of Ransomware Based on Stacking Model Fusion [J]. Netinfo Security, 2020, 20(2): 57-57.
[3]	Hao ZHANG, Long CHEN, Zhiqiang WEI. Abnormal Traffic Detection Technology Based on Data Augmentation and Model Update [J]. Netinfo Security, 2020, 20(2): 66-74.
[4]	Yi YU, Liangshuang LV, Xiaojian LI, Tianbo WANG. Dynamic Network Topology Description Language for Mobile Cloud Computing Scenario [J]. Netinfo Security, 2019, 19(9): 120-124.
[5]	Li WEI, Qin DUAN, Zhiwei LIU. A Summary of Medical Information Security Management in Internet Era [J]. Netinfo Security, 2019, 19(12): 88-92.
[6]	Liangguo CHEN, Shuhua RUAN, Xingshu CHEN, Yonggang LUO. A High-speed Network Flow Reassembly Optimized Scheme for Network Security Analysis [J]. Netinfo Security, 2019, 19(11): 82-90.
[7]	Yanhua LIU, Xiaoling GAO, Minchen ZHU, Peihuang SU. Research on Classification Method of Network Security Data Based on Data Feature Learning [J]. Netinfo Security, 2019, 19(10): 50-56.
[8]	LUO Wenhua, WANG Zhiming. Research on Disaster Recovery Mechanism of HBase Database Based on Storage Form and Features [J]. 信息网络安全, 2018, 18(9): 42-47.
[9]	WANG Yan, PAN Chen. Research on Dynamic Data Gathering Algorithm Based on Biological Immune Mechanism in WSANs [J]. 信息网络安全, 2018, 18(6): 7-11.
[10]	YU Runshen, MI Haodong, CHEN Minjun, CHENG Cheng. Research on AP Signal Characteristics of 3D Indoor Positioning Mechanism Based on WLAN [J]. 信息网络安全, 2018, 18(6): 67-76.
[11]	LUO Wenhua, WANG Jun, SUN Yuanyuan. Research on Multi-layer Data Cooperative Analysis of Nodes Based on Cloud Server [J]. 信息网络安全, 2018, 18(3): 39-45.
[12]	MEI Donghui, LI Hongling. Research on Load Balancing of Virtual Machine Based on Multiple Objective Hybrid Particle Swarm Optimization [J]. 信息网络安全, 2018, 18(2): 78-83.
[13]	GUL Khan Safi Qamas, WANG Peng, LUO Senlin, PAN Limin. A Technical Research on High-concurrency Web Application [J]. 信息网络安全, 2017, 17(12): 29-35.
[14]	WANG Bo, WANG Huaibin. Research on Imbalanced Abnormal Data Classification Algorithm Based on Active Learning [J]. 信息网络安全, 2017, 17(10): 42-49.
[15]	WANG Dongliang, YI Junyan, LI Shihui, WANG Hongxin. Task Scheduling of Cloud Computing Based on Fusion of Load Balancing and Bat Algorithm [J]. 信息网络安全, 2017, 17(1): 23-28.