Identification and isolation of crypto ransomware using honeypot

Crypto ransomware is one of the challenging threats that incorporate advanced encryption algorithms to block system files and demand payment to provide the victim with the key that can decrypt the blocked content. The spread of ransom-ware which is increasing as traditional detection-based protection, such as antivirus and anti-malware, has proven ineffective at preventing attacks. In this type of attack, hackers install code on a phishing website that redirects to malicious sites. This paper discusses the security mechanisms that can be undertaken to identify the ransomware activities on the website. In case of phishing website, the researchers try to discover whether the intention is ransomware kind of attack using honeypot analysis. The experimental results show the feasibility and better performance in detecting ransomware activities.