Open access
2026
Real-Time Endpoint Ransomware Detection and Prevention via Strategic Deception Directories and Block-Level Entropy Analysis
A lightweight host-based ransomware detection and prevention prototype for Windows endpoints that combines three mechanisms: strategically placed deception directories (1000_Trap), localized Shannon-entropy analysis, and automated process termination using psutil is presented.
Kia-Yi Tong, Muhammad Hafiey Mughnie Bin Amran, Megat Muhammad Ridzuan et al.
· International journal of re... · 0 citations