18.5. Discussion

The previous experiments have highlighted "why the state-of-the-art anti-ransomware tools assisted by machine learners are still insufficient to detect ransomware versions from different ancestor families and multi-descent families in a realistic environment." The answers to this question can be summarized as follows:

• Shortage in static analysis: Not all state-of-the-art machine learne...