MIT Ransomware Questions

CS2470 Homework2 The problems you are asked to solve are worth 12 points. The grade will be capped at 10 points. CryptoLocker is a piece of Ransomware malware that, once delivered and run, encrypts files on its victims’ computers, deletes the original file, and demands a payment in exchange for the ability to decrypt to recover the file. The creator wants to achieve certain properties: • the victim shouldn’t be able to decrypt without payment (even if they hire a forensics expert); • different victims should not be able to co-operate to avoid paying separately: if victim Alice pays, that should be no way help victim Bob decrypt his files • the creator wants to minimize the cost of administering the malware as well as the probability of being compromised itself. 1. Please describe the advantage/disadvantage on EACH step (Step 1 to 8) and explain which steps achieve creator’s properties (10 points). 2. From a ransomware creator’s point of view, how can the entire process be more efficient and secure (2 points)?