"Novel Approaches to Detection of Ransomware Campaigns"

Abstract: We introduce an innovative method for detecting ransomware campaigns by analyzing attack timelines in victim networks. By creating malicious activity profiles from various alert sources, we can build alert graphs that effectively represent the attack timelines. In these graphs, each node signifies a malicious activity detection, and the connections between nodes illustrate potential attack paths. Our approach demonstrates flexibility in handling different attack patterns by employing a new technique to parse and classify alert graphs, maintaining effectiveness even with potentially limited node features. 

Dr. Rahman is a subject matter expert in the design and implementation of cloud analytics and architectures that support Situational Awareness (SA) tools for the commercial and public sector. Dr. Rahman has over 25 years of information technology (IT) experience and holds Ph.D.s in mathematics and physics. He has published in physics, mathematics, and information technology.