ICT40118 Cyber Security: Demonstration of Ransomware Presentation

This presentation delves into the cyber security threat of ransomware, defining it as a malicious act disrupting digital resources. The presentation outlines the aims and objectives, which include comprehending the concept of cyber security, understanding ransomware, and recommending control measures. It explains ransomware as a type of malware that restricts system operation until a ransom is paid, detailing its operation and the assets targeted. The presentation covers controls for mitigating ransomware attacks, such as strong firewalls and up-to-date security software, using WannaCry as a case study to illustrate the impact and management of such threats. The presentation also provides recommendations for future work, including regular security patches and the use of antivirus software.

D E M O N S T RAT I O N
O F A CY B E R
S E C U R I T Y T H R E AT
R A N S O M W A R E

INTRODUCTION
• A cyber security threat can be
described as a malicious act of
disrupting the digital life and
resources
• The term cyber attack
encompasses threats that
includes computer virus, data
breach and denial of service.
• The presentation will discuss
the one of the agents of cyber
attack, that is ransomware.

AIMS AND
OBJECTIVES
AIM
• The presentation aims in
discussing the effect,
impact and control of
ransomware
OBJECTIVE
• To comprehend the
concept of cyber
security
• To understand the
concept of ransomware
• To recommend controls
for management of
these issues

MALWARE/
RANSOMWARE
• Malware is mainly
described as a malicious
software that is harmful
to an user
• The ransomware is
generally designed to
restrict a system and it
operation till its owner
pays the demanded
ransom

HOW IT
WORKS/OPERATES?
• Malware can be described as
a software that is designed
with an aim of damaging the
computer, server or client
• Ransomware is designed for
blocking access to the
computer system.
Ransomware encrypts the
files of the affected
computer and demands a
ransom from the owner

ASSETS THAT ARE
TARGETED
• Ransomware is a
category of malware
that becomes significant
threat to computer and
software systems
• There are two types of
ransomware, which
include crypto
ransomware and locker
ransomware

CONTROLS TO THE
TREATS
• The ransomware attacks
can be prohibited by
applying proper controls
and information security
• Maintaining a strong
firewall is needed for
keeping the security
software up-to-date

EXAMPLE: WANNA
CRY
• Wanna cry is a ransomware
that has infected the NHS
and other organizations
• The attack occurred after a
vulnerability in Microsoft’s
software, such as EternalBlue
is detected.
• Wanna cry encrypted the
files stored in all the attacked
computers and demanded a
ransom from the owner

DISCUSSION OF THE
CASE
• The wanna cry ransomware
spread quickly through
several computer networks in
the year 2007
• It mainly aimed and stuck
several high profile systems
• It consists of multiple
components which include
dropper and a program which
is self contained for extracting
the components of other
applications

IMPACT OF
WANNACRY
• Within a day of attack, it
had spread across the
globe
• It had infected more
than 230,000 computer
systems in an altogether
150 countries
• It resulted in a loss of $4
billion

HOW THE THREAT
WAS DETECTED?
• The threat was detected
by detecting the exploit
through which wanna
cry spread in older
windows systems
• The exploit was
EternalBlue that was
leaked by the group
Shadow Brikers

HOW THE THREAT
WAS MANAGED?
• The infection was
disabled when a security
expert cracked a code
for shutting down the
wanna cry
• The entire ransomware
attack was later brought
down with the help of a
white hat hacker

NUMERICAL
ASSESSMENT
Ransomware Quantity of Threat
Intrusion (on a scale of
1 to 10)
Cost to Organization
(on a scale of 1 to 10)
Wanna Cry 10 8
Not Peyta 10 7
Bad Rabbit 10 6

DISCUSSION
• The ransomware attack
is planned to demand
money from the owner
• Ransomware attack is a
serious threat to cyber
security
• Use of proper firewall
protection can help in
controlling the
ransomware attack.

CONCLUSION
• The presentation provides an idea of the concept of
ransomware
• This malware is designed to fetch ransom from the
legitimate users
• An example of a dangerous ransomware attack is
wanna cry ransomware attack
• Other example include NotPeyta attack

RECOMMENDATION
AND FUTURE WORK
• The recommendations for controlling the ransomware
attacks are indicated as follows-
 Use of proper firewall protection
 The security patches should be up to date
A number of researches are undertaken to learn about
the working principle of ransomware. Use of antivirus in
every computer system is recommended to eliminate
similar issues in future.

BIBLIOGRAPHY
• Brewer, R., 2016. Ransomware attacks: detection, prevention and cure. Network
Security, 2016(9), pp.5-9.
• Kao, D.Y. and Hsiao, S.C., 2018, February. The dynamic analysis of WannaCry
ransomware. In 2018 20th International Conference on Advanced Communication
Technology (ICACT) (pp. 159-166). IEEE.
• Martin, G., Ghafur, S., Kinross, J., Hankin, C. and Darzi, A., 2018. WannaCry—a year
on.
• Mohurle, S. and Patil, M., 2017. A brief study of wannacry threat: Ransomware
attack 2017. International Journal of Advanced Research in Computer Science, 8(5).
• Richardson, R. and North, M.M., 2017. Ransomware: Evolution, mitigation and
prevention. International Management Review, 13(1), p.10.
• Scaife, N., Carter, H., Traynor, P. and Butler, K.R., 2016, June. Cryptolock (and drop
it): stopping ransomware attacks on user data. In 2016 IEEE 36th International
Conference on Distributed Computing Systems (ICDCS) (pp. 303-312). IEEE.

ANY QUESTIONS?