Time detection of malware threads

Abstract

Malware is an unwanted software that performs actions in computers or computer networks, which users might disagree with. One of the worst types of malware is ransomware that affects the victim’s data by modifying, deleting, or blocking the access to them. Frequent malware attacks on organizations led to a change in malware detection from external identification (companies were dependent on other organizations or their products) to internal identification. Based on this, the time needed to detect ransomware (dwell time) has significantly decreased. Nowadays, internal detection prevails over the external one. The dwell time differs based on the continent. In the paper, the malware and ransomware descriptions with their variants are provided, and the concept of dwell time is described. Moreover, attention is not only paid to the reduction of dwell time within the recent years but also to how the most used vector attacks are connected. © 2021, The Author(s), under exclusive license to Springer Nature Switzerland AG.