Work/Software
Shield Guard
RANSOMWARE DEFENDER
Software that protects Windows systems from ransomware: it detects mass-encryption behavior the moment it happens, stops the attacking process, and restores the affected files.
- Client
- Graduation project — Department of Information Technology, Dhamar University
- Location
- Yemen
- Year
- 2025 – 2026
- What we did
- Software, Cybersecurity
Traditional antivirus tools rely on known malware signatures, so they lag behind every new ransomware variant. And once encryption actually begins, a user’s files can be lost within seconds.
Instead of hunting for signatures, Shield Guard watches behavior. A C++ engine flags any process that modifies a large number of files in an encryption-like pattern, stops it immediately, then restores the files from continuous backups and Windows shadow copies. The interface shows protection status, the threat log, and the list of trusted applications, in both light and dark modes.
- Behavioral detection engine in C++
- Instant termination of suspicious processes
- Recovery of affected files
- Threat log backed by SQLite
- Trusted applications list
- Light and dark mode interface
A team graduation project by five students, built using an Agile methodology and tested in an isolated virtual environment.
Status dashboard in dark and light modes
Threat log: processes the engine stopped and files it restored
Trusted applications list
