Framework de autoavaliação para maturidade em defesa contra Ransomware

Abstract

Ransomware attacks have become widely recognized as one of the most prevalent and dangerous cyber threats of the past decade, with exponential growth year after year. The cyber threat landscape has evolved significantly, as criminals have shifted their focus away from service disruption, such as Distributed Denial of Service (DDoS) attacks, which have lost relevance. The primary goal now is profit. In this context, ransomware stands out as the ideal tool due to its ease of execution and the increasing availability of criminal services, such as "Ransomware as a Service" (RaaS), which allow attacks to be initiated with just a few clicks. Given this landscape, it is crucial to identify vulnerabilities within organizational infrastructures in order to implement more effective protection measures. However, combating ransomware is a complex challenge, as it involves a broad range of factors that can influence the occurrence and spread of such attacks. A practical and efficient solution to mitigate this threat is the comprehensive self-assessment of the various aspects that constitute ransomware defense. The aim of this essay is to propose the development of a self-assessment framework that helps identify the main attack vectors utilized by ransomware, thereby enabling organizations to strengthen their defenses and enhance their resilience in the face of this growing threat.