Ransomware Prevention System using Python and IoT

Abstract: Ransomware attacks are a critical threat to data integrity by file encryption and ransom payment for decryption. Conventional cybersecurity mechanisms are ineffective against zero-day ransomware attacks, and hence a forward-looking mitigation solution is required. This project proposes a Ransomware Mitigation System that scans file system activity in real-time through Python to identify ransomware attack patterns through file encryption activity. During a ransomware attack, the encryption process changes file extensions, which Python identifies and notifies a .NET Windows Forms application. When identified, the application automatically activates an ESP8266-based IoT relay to physically remove the infected device from the network to prevent further decryption. The system also disables network drivers to prevent further propagation of the attack. Once isolated from the network, the system will prompt the user to start recovery procedures, recovering compromised files back to their previous safe state. To provide added data resilience, the project additionally employs an hourly or daily automated backup procedure that ensures constant protection of data against ransomware attacks. Proactively reducing data loss and preventing the spread of ransomware, this implementation also integrates well with current cybersecurity systems for added system protection. Objectives: Comprehend the need of anti-ransomware system in the first place basically, how it can keep your precious data safe and stop hackers from wrecking your day. Dig into what’s happening with ransomware trends. What's new, and just how bad it can affect the data and your system. Figure out why it’s so difficult to spot and shut down these attacks. Examine the real time monitoring, network segmentation, and data recovery. Keywords: Ransomware Prevention, Cybersecurity, File Monitoring, Python, IoT Security, ESP8266, Network Isolation, Data Protection, Backup and Recovery.