2017 Symposium Posters

Posters > 2017

Finding Ransomware Encryption Keys in Volatile Memory [DE5-8C5]


Primary Investigator:
Marcus Thompson

Project Members
Joseph Graham
Ransomware is malware that encrypts files on the target computer. Ransomware has become more prominent over the years causing problems for both consumers and businesses. Ransomware is extremely hard to recover from on a target computer if there is no backup seeing as how it encrypts most files on the user's computer. The purpose of this poster is to investigate ransomware and see if the encryption keys for the ransomware can be found in volatile memory allowing the files to become decrypted and recovered without paying the ransom or needing a backup.