3 ms·
OSes will have to start detecting processes that do a lot of disk read/write, and perhaps network upload, and quarantine them. Also, checkpoint/log based file s
by jwatte 10y ago
OSes will have to start detecting processes that do a lot of disk read/write, and perhaps network upload, and quarantine them.
Also, checkpoint/log based file systems like nilfs2 can let you roll back to any point before infection.
- charonn0 10y agoI'm not sure that would be effective. A lot of legitimate software would get caught up in the dragnet.
- jwatte 10y agoYes, and the user would have to whitelist them. However, how much software do you really have that rewrites even 1/10th of all your documents?
- mattstreet 10y agoThen the ransomware would just encrypt the files more slowly.