Knowing the ransomware and building defense against it - specific to healthcare institutes

In the healthcare field the patient data is very sensitive. So the hospitals should have some plan to protect it as well. However, in US alone a number of hospitals are attacked by cybercriminals through ransomware malwares to make big bucks. The hospitals should be prepared when given such situation where they have to pay money to get their data back. Now the question arises should they be paying the ransom? In some cases a hospital may not have a choice, if their backup procedure is broken. This paper presents various steps that ransomware follows to encrypt the important files on the victims network, then asks for money and once it receives the money, then releases the data files. The paper also presents various steps those could be followed to protect against such attacks.