The objective of this project is to design a ransomware detection and prevention system that monitors file activity patterns. The system detects rapid file encryption attempts and unusual file modifications to prevent ransomware attacks before significant damage occurs.
Study ransomware attack mechanisms and encryption techniques.
Analyze file system behavior during ransomware infections.
Design a file activity monitoring module that tracks file modifications.
Implement detection rules for mass file renaming or encryption patterns.
Develop automatic alert mechanisms when suspicious behavior is detected.
Provide options to block suspicious processes.
Maintain secure logs of detected events.
Test the system using simulated ransomware scenarios.
Measure response time and detection accuracy.
Document mitigation strategies and limitations.
