System and method for distributed system and method of ransomware detection and recovery

A distributed system for ransomware detection and recovery, comprising:

• a first processor programmed to utilize a circuit to collect power measurements from one or more side-channel measurements of one or more devices;
• a second processor located at a detection agent and in communication with the first processor via a first communication channel, wherein the second processor is programmed to output results indicating ransomware associated with the one or more side-channel measurements at one or more devices;
• a third processor located at an attestation agent and in communication with the second processor via a second communication channel, wherein the third processor is programmed to allow authorized access of the results from the second processor;
• and
• a fourth processor in communication with the second processor, wherein the fourth processor is isolated from the second processor and programmed to receive a subset of workload from the second processor to assist in detecting ransomware.

A distributed system for ransomware detection and recovery, comprising:

• a first processor programmed to utilize a circuit to collect power measurements from one or more side-channel measurements of one or more devices;
• a second processor located at a detection agent and in communication with the first processor via a first one-way communication channel, wherein the second processor is programmed to output results indicating ransomware utilizing with the one or more side-channel measurements;
• a third processor located at an attestation agent and in communication with the second processor via a second communication channel, wherein the third processor is programmed to allow authorized access of the results from the second processor;
• and
• a fourth processor in communication with the second processor, wherein the fourth processor is isolated from the second processor and programmed to receive a subset of workload from the second processor to assist in detecting ransomware, wherein the first processor, the second processor, the third processor, and the fourth processor are different processors in isolated environments.