search

undo-ransomware / ransomware_detection

:arrows_counterclockwise: Ransomware recovery app for Nextcloud
https://apps.nextcloud.com/apps/ransomware_detection
GNU Affero General Public License v3.0
22 stars 6 forks source link

What is the difference to Nextcloud's official project? #34

Closed rugk closed 3 years ago

rugk commented 3 years ago

What is the difference to https://github.com/nextcloud/ransomware_protection and why should I use yours instead of the other one?

Also, I'd highly urge you to make that answer/difference clear in the Readme and other descriptions in the Nextcloud store, because they serve very similar needs, likely should not be combined (or can they?? would that make sense?), so users have to choose/decide for one and even have very similar names.

All that combined, this can lead to a lot of confusion, so IMHO you need to make that super clear and differentiate the projects.

ilovemilk commented 3 years ago

The main difference between the official Nextcloud project and this project is that the official projects relies on blacklisting of file malicious file extensions therefore only detects known ransomware files. This project tries to also detect unknown ransomware by analysing the files for generic ransomware detection patterns like e.g.: read/write patterns, file entropy, etc.

This is a very good point. They can be used both combined: Ransomware protection should catch all known ransomware and this project tries to catch all unknown ransomware.

Thanks for the hint I will try to clarify these points in the readme to hopefully remove the confusion. So that the users can profit the most from both apps.

haarp commented 3 years ago

Wouldn't it be even better if you worked with the official app and combined your efforts, if possible?

ilovemilk commented 3 years ago

Yes I think it would but as I think you already noticed by my repsonse time my time is very limited. At the moment more than maintaining the compatibility and fixing some small issues is sadly all I can offer.

ilovemilk commented 3 years ago

I added a FAQ section to the README. Do you think this clarifies this topic?

rugk commented 3 years ago

Yeah, as for the Readme this is all nice and explains it well…

However, in the Nextcloud app store there is still no indication. At least be some minor indication would be useful there, I guess…

ilovemilk commented 3 years ago

Thanks I totally forgot about that!

ilovemilk commented 3 years ago

I just uploaded a new version to Appstore with an updated info. I hope this helps! :)