Mcafee, Inc.

Ronald Gallella

Joel Robert Spurlock

Carl D Woodward

Cedric Cochin

Craig D Schmugar

Andrew A Furtak

Christiaan Beek

Yury Bulygin

John J Loucaides

Oleksander Bazhaniuk

Gregory Michael Heitzmann

Adam James Carrivick

Particular embodiments described herein provide for an electronic device that can be configured to allow for the mitigation of ransomware. For example, the system can determine that an application begins to execute, determine that the application attempts to modify a file, determine a file type for the file, and create a security event if the application is not authorized to modify the file type. In another example, the system determines an entropy value between the file and the attempted modification of the file, and create a security event if the entropy value satisfies a threshold or determine a system entropy value that includes a rate at which other files on the system are being modified by the application, and create a security event if the system entropy value satisfies a threshold.

Mitigation of ransomware

Growing community of inventors

Beaverton, OR, United States of America

Ronald Gallella