Analyzing Ransomware and Potential Mitigation Strategies

Organizations are finding that traditional anti-virus solutions are often not effective in blocking ransomware. This paper documents research conducted by CyberArk Labs to investigate ransomware and learn which potential mitiga­tion strategies could be most effective. After analyzing and testing more than 157,000 samples of ransomware, CyberArk Labs demonstrate that an alternative approach to proactive security can be effective in protecting against ransomware and dramati­cally minimize its impact. One of the key find­ings was that when local administrator rights were removed and application control policies were in place, 100 percent of ransomware samples were prevented from encrypting files.