Design and Implementation of a Script for Ransomware Detection and Mitigation in Small and Medium-Sized Enterprises

Diego Jesus Dávila-Ortega; José Miguel Salas-Riega; Jairo Coronado-Hernandez; Yasmina Riega-Virú

doi:10.1007/978-3-032-16764-4_9

Design and Implementation of a Script for Ransomware Detection and Mitigation in Small and Medium-Sized Enterprises

Diego Jesus Dávila-Ortega
, José Miguel Salas-Riega
, Jairo Coronado-Hernandez
, Yasmina Riega-Virú

Universidad Privada del Norte
Pontificia Universidad Católica del Perú
Universidad de la Costa

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

Ransomware poses an increasing threat to small and medium-sized enterprises (SMEs), many of which lack the financial and technical resources to deploy advanced cybersecurity solutions. This paper presents the design, implementation, and validation of a Python-based script aimed at early detection and mitigation of ransomware through a multi-layered approach combining honeypot folders, hash verification, and automated responses such as malicious process termination and network disconnection. The proposal was evaluated against five well-known ransomware variants—CTB-Locker, TeslaCrypt, WannaCry, Cerber, and Crysis—within a controlled environment. Results indicate an overall effectiveness of 80%, with no false positives. The manuscript follows a structured methodology (Introduction, State of the Art, Proposal, Evaluation, and Conclusions) and compares the proposed approach with related research, highlighting its novelty as a lightweight, portable, and cost-effective tool that can be adopted by SMEs.

Original language	English
Title of host publication	Advanced Research in Technologies, Information, Innovation and Sustainability - 5th International Conference, ARTIIS 2025, Revised Selected Papers
Editors	Teresa Guarda, Filipe Portela, Maria Fernanda Augusto, Jairo R. Coronado-Hernández
Pages	111-119
Number of pages	9
DOIs	https://doi.org/10.1007/978-3-032-16764-4_9
State	Published - 2026
Externally published	Yes
Event	5th International Conference on Advanced Research in Technologies, Information, Innovation and Sustainability 2025, ARTIIS 2025 - Cartagena de Indias, Colombia Duration: 21 Oct 2025 → 23 Oct 2025

Publication series

Name	Communications in Computer and Information Science
Volume	2790 CCIS
ISSN (Print)	1865-0929
ISSN (Electronic)	1865-0937

Conference

Conference	5th International Conference on Advanced Research in Technologies, Information, Innovation and Sustainability 2025, ARTIIS 2025
Country/Territory	Colombia
City	Cartagena de Indias
Period	21/10/25 → 23/10/25

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

SDG 8 Decent Work and Economic Growth
SDG 9 Industry, Innovation, and Infrastructure

Keywords

Python
Ransomware
automation
cybersecurity
honeypots
mitigation
small and medium enterprises

Access to Document

10.1007/978-3-032-16764-4_9

Cite this

Dávila-Ortega, D. J., Salas-Riega, J. M., Coronado-Hernandez, J., & Riega-Virú, Y. (2026). Design and Implementation of a Script for Ransomware Detection and Mitigation in Small and Medium-Sized Enterprises. In T. Guarda, F. Portela, M. F. Augusto, & J. R. Coronado-Hernández (Eds.), Advanced Research in Technologies, Information, Innovation and Sustainability - 5th International Conference, ARTIIS 2025, Revised Selected Papers (pp. 111-119). (Communications in Computer and Information Science; Vol. 2790 CCIS). https://doi.org/10.1007/978-3-032-16764-4_9

Dávila-Ortega, Diego Jesus ; Salas-Riega, José Miguel ; Coronado-Hernandez, Jairo et al. / Design and Implementation of a Script for Ransomware Detection and Mitigation in Small and Medium-Sized Enterprises. Advanced Research in Technologies, Information, Innovation and Sustainability - 5th International Conference, ARTIIS 2025, Revised Selected Papers. editor / Teresa Guarda ; Filipe Portela ; Maria Fernanda Augusto ; Jairo R. Coronado-Hernández. 2026. pp. 111-119 (Communications in Computer and Information Science).

@inproceedings{7d77fbe2aa0f42c29faf10af6811cc32,

title = "Design and Implementation of a Script for Ransomware Detection and Mitigation in Small and Medium-Sized Enterprises",

abstract = "Ransomware poses an increasing threat to small and medium-sized enterprises (SMEs), many of which lack the financial and technical resources to deploy advanced cybersecurity solutions. This paper presents the design, implementation, and validation of a Python-based script aimed at early detection and mitigation of ransomware through a multi-layered approach combining honeypot folders, hash verification, and automated responses such as malicious process termination and network disconnection. The proposal was evaluated against five well-known ransomware variants{\textemdash}CTB-Locker, TeslaCrypt, WannaCry, Cerber, and Crysis{\textemdash}within a controlled environment. Results indicate an overall effectiveness of 80\%, with no false positives. The manuscript follows a structured methodology (Introduction, State of the Art, Proposal, Evaluation, and Conclusions) and compares the proposed approach with related research, highlighting its novelty as a lightweight, portable, and cost-effective tool that can be adopted by SMEs.",

keywords = "Python, Ransomware, automation, cybersecurity, honeypots, mitigation, small and medium enterprises",

author = "D{\'a}vila-Ortega, \{Diego Jesus\} and Salas-Riega, \{Jos{\'e} Miguel\} and Jairo Coronado-Hernandez and Yasmina Riega-Vir{\'u}",

note = "Publisher Copyright: {\textcopyright} The Author(s), under exclusive license to Springer Nature Switzerland AG 2026.; 5th International Conference on Advanced Research in Technologies, Information, Innovation and Sustainability 2025, ARTIIS 2025 ; Conference date: 21-10-2025 Through 23-10-2025",

year = "2026",

doi = "10.1007/978-3-032-16764-4\_9",

language = "English",

isbn = "9783032167637",

series = "Communications in Computer and Information Science",

pages = "111--119",

editor = "Teresa Guarda and Filipe Portela and Augusto, \{Maria Fernanda\} and Coronado-Hern{\'a}ndez, \{Jairo R.\}",

booktitle = "Advanced Research in Technologies, Information, Innovation and Sustainability - 5th International Conference, ARTIIS 2025, Revised Selected Papers",

}

Dávila-Ortega, DJ, Salas-Riega, JM, Coronado-Hernandez, J & Riega-Virú, Y 2026, Design and Implementation of a Script for Ransomware Detection and Mitigation in Small and Medium-Sized Enterprises. in T Guarda, F Portela, MF Augusto & JR Coronado-Hernández (eds), Advanced Research in Technologies, Information, Innovation and Sustainability - 5th International Conference, ARTIIS 2025, Revised Selected Papers. Communications in Computer and Information Science, vol. 2790 CCIS, pp. 111-119, 5th International Conference on Advanced Research in Technologies, Information, Innovation and Sustainability 2025, ARTIIS 2025, Cartagena de Indias, Colombia, 21/10/25. https://doi.org/10.1007/978-3-032-16764-4_9

Design and Implementation of a Script for Ransomware Detection and Mitigation in Small and Medium-Sized Enterprises. / Dávila-Ortega, Diego Jesus; Salas-Riega, José Miguel; Coronado-Hernandez, Jairo et al.
Advanced Research in Technologies, Information, Innovation and Sustainability - 5th International Conference, ARTIIS 2025, Revised Selected Papers. ed. / Teresa Guarda; Filipe Portela; Maria Fernanda Augusto; Jairo R. Coronado-Hernández. 2026. p. 111-119 (Communications in Computer and Information Science; Vol. 2790 CCIS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Design and Implementation of a Script for Ransomware Detection and Mitigation in Small and Medium-Sized Enterprises

AU - Dávila-Ortega, Diego Jesus

AU - Salas-Riega, José Miguel

AU - Coronado-Hernandez, Jairo

AU - Riega-Virú, Yasmina

N1 - Publisher Copyright: © The Author(s), under exclusive license to Springer Nature Switzerland AG 2026.

PY - 2026

Y1 - 2026

N2 - Ransomware poses an increasing threat to small and medium-sized enterprises (SMEs), many of which lack the financial and technical resources to deploy advanced cybersecurity solutions. This paper presents the design, implementation, and validation of a Python-based script aimed at early detection and mitigation of ransomware through a multi-layered approach combining honeypot folders, hash verification, and automated responses such as malicious process termination and network disconnection. The proposal was evaluated against five well-known ransomware variants—CTB-Locker, TeslaCrypt, WannaCry, Cerber, and Crysis—within a controlled environment. Results indicate an overall effectiveness of 80%, with no false positives. The manuscript follows a structured methodology (Introduction, State of the Art, Proposal, Evaluation, and Conclusions) and compares the proposed approach with related research, highlighting its novelty as a lightweight, portable, and cost-effective tool that can be adopted by SMEs.

AB - Ransomware poses an increasing threat to small and medium-sized enterprises (SMEs), many of which lack the financial and technical resources to deploy advanced cybersecurity solutions. This paper presents the design, implementation, and validation of a Python-based script aimed at early detection and mitigation of ransomware through a multi-layered approach combining honeypot folders, hash verification, and automated responses such as malicious process termination and network disconnection. The proposal was evaluated against five well-known ransomware variants—CTB-Locker, TeslaCrypt, WannaCry, Cerber, and Crysis—within a controlled environment. Results indicate an overall effectiveness of 80%, with no false positives. The manuscript follows a structured methodology (Introduction, State of the Art, Proposal, Evaluation, and Conclusions) and compares the proposed approach with related research, highlighting its novelty as a lightweight, portable, and cost-effective tool that can be adopted by SMEs.

KW - Python

KW - Ransomware

KW - automation

KW - cybersecurity

KW - honeypots

KW - mitigation

KW - small and medium enterprises

UR - https://www.scopus.com/pages/publications/105039558207

U2 - 10.1007/978-3-032-16764-4_9

DO - 10.1007/978-3-032-16764-4_9

M3 - Conference contribution

AN - SCOPUS:105039558207

SN - 9783032167637

T3 - Communications in Computer and Information Science

SP - 111

EP - 119

BT - Advanced Research in Technologies, Information, Innovation and Sustainability - 5th International Conference, ARTIIS 2025, Revised Selected Papers

A2 - Guarda, Teresa

A2 - Portela, Filipe

A2 - Augusto, Maria Fernanda

A2 - Coronado-Hernández, Jairo R.

T2 - 5th International Conference on Advanced Research in Technologies, Information, Innovation and Sustainability 2025, ARTIIS 2025

Y2 - 21 October 2025 through 23 October 2025

ER -

Dávila-Ortega DJ, Salas-Riega JM, Coronado-Hernandez J, Riega-Virú Y. Design and Implementation of a Script for Ransomware Detection and Mitigation in Small and Medium-Sized Enterprises. In Guarda T, Portela F, Augusto MF, Coronado-Hernández JR, editors, Advanced Research in Technologies, Information, Innovation and Sustainability - 5th International Conference, ARTIIS 2025, Revised Selected Papers. 2026. p. 111-119. (Communications in Computer and Information Science). doi: 10.1007/978-3-032-16764-4_9

Design and Implementation of a Script for Ransomware Detection and Mitigation in Small and Medium-Sized Enterprises

Abstract

Publication series

Conference

UN SDGs

Keywords

Access to Document

Other files and links

Fingerprint

Cite this