Network Traffic-Based Ransomware Detection Using Anomaly Detection Algorithms: A Comprehensive Systematic Review.
The present study offers an exhaustive systematic review of various ransomware detection techniques, with a specific focus on network traffic analysis and anomaly detection algorithms. In accordance with the PRISMA protocol, this study analyzes fifteen research papers published between 2021 and 2025...
| Publicado en: | Journal of Basrah Researches (Sciences) Vol. 52; no. 1; pp. 135 - 156 |
|---|---|
| Autores principales: | , |
| Formato: | Artículo |
| Publicado: |
Republic of Iraq Ministry of Higher Education & Scientific Research (MOHESR)
2026
|
| Materias: | |
| Acceso en línea: | Ver este registro en EBSCOhost |
| fields | @attributes: recordID: 1 pdfLink: plink: https://search.ebscohost.com/login.aspx?direct=true&db=hlh&AN=195078487&site=ehost-live header: @attributes: shortDbName: hlh uiTerm: 195078487 longDbName: Humanities International Complete uiTag: AN controlInfo: bkinfo: jinfo: jid: 18172695 GYGY jtl: Journal of Basrah Researches (Sciences) issn: 18172695 maglogo: N pubinfo: dt: 2026 vid: 52 iid: 1 pid: 25427 pub: Republic of Iraq Ministry of Higher Education & Scientific Research (MOHESR) artinfo: ui: 195078487 10.56714/bjrs.52.1.11 ppf: 135 ppct: 21 formats: tig: atl: Network Traffic-Based Ransomware Detection Using Anomaly Detection Algorithms: A Comprehensive Systematic Review. aug: au: Shaheen, Qusay J. Alomari, Esraa Saleh affil: Department of Computer, College of Education for Pure Sciences, Wasit University, 52001 Al-Kut, Wasit, Iraq. su: Ransomware Anomaly detection (Computer security) Computer network traffic Internet security Deep learning Machine learning sug: subj: Ransomware Anomaly detection (Computer security) Computer network traffic Internet security Deep learning Machine learning keyword: Anomaly Detection Cybersecurity Hybrid Algorithms Network Traffic Analysis Proactive Defense Ransomware Detection الأمن السيبراني الخوارزميات الهجينة الدفاع الاستباقي الكشف عن الشذوذ الكشف عن الفدية تحليل حركة مرور الشبك ab: The present study offers an exhaustive systematic review of various ransomware detection techniques, with a specific focus on network traffic analysis and anomaly detection algorithms. In accordance with the PRISMA protocol, this study analyzes fifteen research papers published between 2021 and 2025. The research papers are collected from prominent scientific database sources, including IEEE Xplore, Scopus, ScienceDirect, and Google Scholar. The corpus of research articles can be broadly classified into four main categories of ransomware detection techniques: supervised machine learning approaches, unsupervised anomaly detection techniques, deep learning approaches, and hybrid approaches for ransomware detection.A comparative analysis of the research articles reveals that the deep learning approaches have been able to achieve higher detection accuracies of more than 99%, while the unsupervised anomaly detection approaches have been able to demonstrate higher adaptability in the detection of ransomware. However, the area of ransomware detection has several research gaps that need to be addressed: the lack of standardized data sets for the experiments, the processing of encrypted network traffic, and the occurrence of false positives in the detection process. The research demonstrates the need to incorporate hybrid and behavioral detection techniques to strengthen the robustness of cybersecurity systems against new ransomware attacks. pubtype: Academic Journal doctype: Article src: R language: English refInfo: copyright: @attributes: flag: Y dt: @attributes: year: 2026 holdings: @attributes: islocal: N |
|---|