Finding Ransomware Encryption Keys in Volatile Memory
Primary Investigator:
Marcus Thompson
Joseph Graham
Abstract
Ransomware is malware that encrypts files on the target computer. Ransomware has become more prominent over the years causing problems for both consumers and businesses. Ransomware is extremely hard to recover from on a target computer if there is no backup seeing as how it encrypts most files on the user's computer. The purpose of this poster is to investigate ransomware and see if the encryption keys for the ransomware can be found in volatile memory allowing the files to become decrypted and recovered without paying the ransom or needing a backup.