Powered by OpenAIRE graph
Found an issue? Give us feedback
image/svg+xml art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos Open Access logo, converted into svg, designed by PLoS. This version with transparent background. http://commons.wikimedia.org/wiki/File:Open_Access_logo_PLoS_white.svg art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos http://www.plos.org/ ZENODOarrow_drop_down
image/svg+xml art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos Open Access logo, converted into svg, designed by PLoS. This version with transparent background. http://commons.wikimedia.org/wiki/File:Open_Access_logo_PLoS_white.svg art designer at PLoS, modified by Wikipedia users Nina, Beao, JakobVoss, and AnonMoos http://www.plos.org/
ZENODO
Other literature type . 2026
License: CC BY
Data sources: ZENODO
ZENODO
Other literature type . 2026
License: CC BY
Data sources: Datacite
ZENODO
Other literature type . 2026
License: CC BY
Data sources: Datacite
versions View all 2 versions
addClaim

Resilience and Recovery Against Ransomware in Corporate Networks

Authors: Vieira, Leonardo; Curralo, Diogo; Ventura, Diogo;

Resilience and Recovery Against Ransomware in Corporate Networks

Abstract

Ransomware remains one of the most disruptive and financially damaging cyber threats affecting corporate environments, with attack sophistication rising notably between 2020 and 2025. Contemporary enterprises face a dual challenge: preventing operational paralysis and ensuring forensic readiness to support post-incident investigation and recovery. This article examines resilience and recovery mechanisms against ransomware within corporate networks, integrating digital forensic principles, cyber-resilience frameworks, incident response guidance, and empirical threat intelligence. It synthesizes insights from ENISA threat landscape reports, NIST cybersecurity and recovery guidelines, Zero Trust data security models, immutable storage research, and large-scale industry surveys. The analysis identifies structural weaknesses commonly exploited by ransomware operators, such as identity misconfigurations, insufficient backup testing, and gaps in data lifecycle governance. Furthermore, the article evaluates modern countermeasures including Zero Trust architectures, immutable backup strategies, automated recovery orchestration, cloud-centric resilience models, and forensic-led detection approaches. The goal is to provide an evidence-based, multi-layered blueprint that enhances organisational preparedness, minimises downtime, strengthens post-incident reconstruction, and supports legal and regulatory compliance following a ransomware event.

Related Organizations
Keywords

Cyber Resilience, Threat Intelligence, Digital Forensics, NIST Frameworks, Ransomware, Incident Response, Business Continuity, Corporate Networks, Backup and Recovery, Immutable Storage, Zero Trust

  • BIP!
    Impact byBIP!
    selected citations
    These citations are derived from selected sources.
    This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
    0
    popularity
    This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.
    Average
    influence
    This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
    Average
    impulse
    This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.
    Average
Powered by OpenAIRE graph
Found an issue? Give us feedback
selected citations
These citations are derived from selected sources.
This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
BIP!Citations provided by BIP!
popularity
This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.
BIP!Popularity provided by BIP!
influence
This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
BIP!Influence provided by BIP!
impulse
This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.
BIP!Impulse provided by BIP!
0
Average
Average
Average