Deception-Based Proactive Defense Against Ransomware in VMWare ESXI Systems
This study focuses on the vulnerabilities and attack vectors connected with ransomware in Elastic Sky X integrated (ESXi) settings. We offer a novel technique to address these concerns by mimicking an ESXi environment, focusing on honeypot deployment and monitoring behaviors. Our strategy is creating a controlled emulation of ESXi in which we place honeypots to lure and capture ransomware activity. Furthermore, we use sophisticated monitoring methods to watch and evaluate ransomware behaviors in this simulated environment. Our approach’s effectiveness is tested using the simulated ESXi environment’s detection and response capabilities. The findings show that using honeypots in conjunction with careful behavioral monitoring can considerably improve the identification and mitigation of ransomware threats in virtualized environments.
Authors
- Anh-Nhat Nguyen (ORCID: https://orcid.org/0009-0009-4006-4352)
- Nhu-Thanh Nguyen (ORCID: https://orcid.org/0009-0000-1057-1593)
- Trang Trinh (ORCID: https://orcid.org/0000-0001-9072-7796)
- Ngo Tung Son (ORCID: https://orcid.org/0000-0003-4098-3147)
- Minh-Quan Do (ORCID: https://orcid.org/0009-0009-5326-9189)
- Hue Van Thi Tran
- Minh-Tri Luu
- Thanh-Tam Tran Thi
Institutions
- FPT University (VN)
Publication Details
- Published
- 2024-10-24
- DOI
- https://doi.org/10.1109/asiancomnet63184.2024.10811049
- Citations
- 2
- Primary Topic
- Advanced Malware Detection Techniques
- Type
- article
- Field-Weighted Citation Impact
- 0.70