A Multicriteria Decision-Making Approach for Ransomware Detection Using MITRE ATT&CK Mitigation Strategy

Ransomware attacks have become increasingly sophisticated, targeting critical systems and exploiting vulnerabilities at multiple stages of the attack lifecycle. A novel framework is introduced that leverages multicriteria decision-making (MCDM) to enhance ransomware detection through the integration of MITRE ATT&CK strategies, allowing for automated, real-time prioritization and mitigation of ransomware behaviors. The framework dynamically evaluates criteria such as attack severity, system detectability, and resource constraints, enabling a more adaptive and comprehensive approach to ransomware defense. The significance of this approach lies in its ability to automate decision-making processes without requiring human intervention, providing faster and more accurate mitigation strategies. Experiments demonstrated that the proposed system consistently outperformed traditional rule-based systems, offering a scalable solution for real-time cybersecurity operations.