Scholarly record
RANSOMWARE CRISIS MANAGEMENT AND CRISIS SCENARIO SIMULATION
Abstract
Today, growing number of ransomware attacks from the cyberspace is getting more and more attention as the danger of immediate closing of business for attacked organizations rises dramatically. High level encryptions used by current versions of ransomware makes it almost impossible to be decrypted in the real time and probability of production going live again for attacked organization could be low. Estimated revenue up to 1 billion USD in 2016 makes this type of cybercrime activity very popular within the hackersпїЅ community. Careful preparation for such ransomware attacks with detailed prevention steps and set up crisis management scenarios is the only way how to avoid situations when the one and only solution for a victim is to pay requested fee to criminals. Paper discusses necessary precautions for organizations to be prepared and to minimize the risk of such an attack. It also tries to outline how to get out of the crisis situation, in case the attack happens, with the minimum losses for users and organization. The use of the crisis management scenario, simulated by KRIMA EEM system installed at the Crisis Management Center of Matej Bel University in the city of Banska Bystrica, Slovakia will be demonstrated.
Publication Impact Profile
Publication details
References11
Terem, P., Čajka, P., Rýsová, L., : Slovakia in Geopolitical and Geo-Economic Context. Praha: Kamil Mařík, Professional Publishing, 1. Edition, 2015. ISBN 978-80-7431-120-8
Ušiak, J., Ivančík, R.: Economy and Defence in the NATO Member States. In Economic Annals – XXI, Vol. 19, No. 7-8(2)/2014, ISSN 1728-6220, pp. 8-12.
Lipovský, R., Štefanko, L., Braniša, G. : Rise of Android Ransomware, ESET, Bratislava, Slovak Republic, on the internet, www.eset.sk, 2016
ISACA 2016 Cybersecurity Snapshoot Global Results, on the internet https://www.isaca.org/pages/2016-cybersecurity-snapshot.aspx
Oesterman Research Inc: Oesterman Research White Paper, Best practices for Dealing With Phishing and Ransomware, august 2016, on the internet https://www.ostermanresearch.com/
US Dept of Justice, June, 2016: How to Protect Your Networks from Ransomware, https://www.justice.gov/criminal-ccips/file/872771/download
Brownlee, N., Guttman, E., RFC 2350: Expectations for Computer Security Incident Response, on the internet http://www.ietf.org/rfc/rfc2350.txt, 1998
Fabián, K.: Crisis Management Training System for Advanced Security Threats in Cyberspace, In IMSCI 2014 : 8th International Multi-Conference on Society, Cybernetics and Informatics, Orlando, USA, 2014 , ISBN 978-194176306-3, pp. 42-47.
Kazanský R., Melková M. : Information Technologies and their Usage in Crisis Management as a Tool to Increase the Quality of Educational Process, 15th International Multidisciplinary Scientific Geoconference SGEM 2015, Sofia, Bulgaria, Vol.3.,pp. 917-924. ISBN 978-619-7105-41-4. - ISSN 1314-2704.
Anton Ivanov, David Emm, Fedor Sinitsyn, Santiago Pontiroli: The Ransomware Revolution, Kaspersky Security Bulletin, december 2016, on the internet https://securelist.com/analysis/kaspersky-security-bulletin/76757/kaspersky-security-bulletin-2016-story-of-the-year/
Alessandrini , A. : Ransomware Hostage Rescue Manual, KnowBe4 LLC, USA, 2015, on the internet http://resources.idgenterprise.com/original/AST-0147692_Ransomware-Hostage-Rescue-Manual.pdf
View or Download full articleAccess options
SWS access login
Login as SWS Scientific CommitteeLogin as SWS Scientific PartnerLogin as SWS AuthorAuthors and approved SWS contributors will read and export their own linked papers after identity matching by SWS profile, email and SGEM GlobalID.
For librarian assistance: [email protected]
Purchase Instant Access
- Article can be downloaded after successful payment.
- Article may be used according to SWS library access terms.
- Article cannot be redistributed.
