The problem
Ransomware encrypts files quickly, and by the time users notice, backups and shares are already damaged.
What to build
Develop an agent that spots mass-encryption behaviour from file activity and isolates the machine within seconds in a lab setting.
Success looks like
Detection of simulated ransomware in under ten seconds with minimal false positives during normal work.
Suggested technologies
- Behavioural detection
- Entropy analysis
- Endpoint agent
- Containment
- Safe simulation
An original, independent statement. It is not an official Smart India Hackathon problem statement, and Arventiq Labs is not affiliated with or endorsed by that programme. The scenario is illustrative and does not describe any specific organisation. Free to use with credit.