20
In this webinar you will learn: Understand how Ransomware is Getting Worse Backups and Snapshots Are No Longer Enough 3 Things You Can Do to Protect Yourself Ransomware Five Reasons You’re Not As Protected As You Think On Demand Webinar For audio playback and Q&A go to: http://bit.ly/Ransom5

Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

Embed Size (px)

Citation preview

Page 1: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

In this webinar you will learn:● Understand how Ransomware is Getting Worse

● Backups and Snapshots Are No Longer Enough

● 3 Things You Can Do to Protect Yourself

RansomwareFive Reasons You’re Not As Protected As You

ThinkOn Demand Webinar

For audio playback and Q&A go to:

http://bit.ly/Ransom5

Page 2: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

● Analyst firm focused on storage, cloud and virtualization

● Knowledge of these markets is gained through product testing and interaction with end users and suppliers

● The results of this research can be found in the articles, videos, webinars, product analysis and case studies on our web site:http://storageswiss.com

Who Is Storage Switzerland?

Page 3: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

Our SpeakersGeorge Crump is the founder of Storage Switzerland, the leading storage analyst focused on the subjects of big data, solid state storage, virtualization, cloud computing and data protection.

He is widely recognized for his articles, white papers, and videos on such current approaches as all-flash arrays, deduplication, SSDs, software-defined storage, backup appliances, and storage networking. He has over 25 years of experience designing storage solutions for data centers across the US.

Page 4: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

Our SpeakersGary Watson co-founded Nexsan in 1999 and served as Chief Technology Officer until the company was acquired in 2013. In 2014, Mr. Watson was given the title Imation Fellow in recognition of his service. Now, he is the Vice President of Technical Engagement for Nexsan and was described in a recent interview as “one of those brilliant technical people who also possesses the gift to communicate eloquently, enthusiastically and informatively with any audience.” Prior to Nexsan, Mr. Watson held engineering and management positions at Trimm Technologies, Data General and Digital Equipment Corporation minicomputers. He studied Physics at Harvey Mudd College in Claremont, California.

Page 5: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

5 ©2016 Nexsan. All Rights Reserved.

Imation | Nexsan Company Overview

Imation – Parent Company• Holding Company • Divested from legacy businesses

Nexsan - Trading Company▪Founded in 1999▪Pioneered capacity-optimized storage▪A history of technological innovation▪Over 40,000 systems installed▪Over 20,000 end-users, 60 countries▪Six major facilities: Campbell,

Thousand Oaks, Escondido CA; Montreal Canada; Derby, East Isley UK

Page 6: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

What Is Ransomware?

• Malware that, once triggered, encrypts data

• For the most part the only way to un-encrypt is to pay encryptor

• Key target is unstructured data and now databases

Page 7: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

The State Of Ransomware

• Over 80% of businesses have been infected at least once this year

• Over 40% have paid the ransom

• Typical ransoms range from $2,000 to $15,000

Page 8: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

Why Is Ransomware So Effective?

• Thrives on

• Weaknesses in organization’s data protection strategies

• Weaknesses in end-user training

• Ransom $ is low

• Cheaper than recovering data

• Because the data protection process is too complex

• Organizations have a False Sense of Security

Page 9: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

Reason 1: Backups Aren’t Frequent Enough

• Ransomware attacks occur during the day

• Hours after backups have been completed

• The most valuable data, the data that is being created or modified on THAT day, is also the day you are most likely to pay to encrypt

• Some Ransomware has specifically targeted backup files first

Page 10: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

Reason 2: Backup Devices Aren’t Safe

• Most Disk Backup Appliances are network mounts

• Backups are stored as files on the appliance

• Ransomware can encrypt those files just like any other

• Some Ransomware has specifically targeted popular disk backup appliances

Page 11: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

Reason 3: Snapshots Aren’t Safe

• Snapshots CAN be taken more frequently

• Still may not be frequent enough

• May impact production storage performance

• Require more storage capacity

• Most snapshots are easily mountable

• Some Ransomware specifically targets snapshots

Page 12: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

Reason 4: Users Can Only Be Trained So Far

• What can be done (what should we train them on)

• But Ransomware emails are getting more creative

Page 13: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

Reason 5: Ransomware Is Getting MORE Sophisticated

• Targeting specific devices

• No longer aimlessly walks the file system

• Encrypts high value data (database)

Page 14: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

The Ransomware Solution

• Real-time data protection

• Protected data stored as “Read-Only”

• Cost effective storage platform

• multi-purpose, solves more problems than Ransomware

Page 15: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

15 ©2016 Nexsan. All Rights Reserved.

Assureon provides…

▪Long term archive storage for fixed content files▪Guaranteed file availability▪Guaranteed file integrity

▪Assureon doesn’t have a “delete” key – files are removed only pursuant to defined Retention Rules. ▪Some or all Rules may be configured such that even

the administrator can’t change them, or can only change them after a specified period of time.▪The inability of even admin-level people or systems

to directly modify or delete a file makes Assureon very resistant to viruses and ransomware.

Page 16: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

16 ©2016 Nexsan. All Rights Reserved.

▪A unique “fingerprint” representing the content of each file is generated upon ingestion▪Every 90 days the integrity of every

file is audited against the original “fingerprint”▪Guarantees file level integrity within

the archive▪Guarantees that a file has not been

changed (authenticity)▪Reports any data corruption▪Self healing if corruption is found▪Provides an audit of file integrity

Guaranteed File Integrity – Fingerprint Audit

Page 17: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

17 ©2016 Nexsan. All Rights Reserved.

▪Files entering the Assureon Archive are given a unique sequential serial number – an “asset tag”▪Every 90 days every file is checked to make

sure it is in the archive▶Performed at both the primary site and the secondary site

▪Ensures all files are present in the Assureon archive▪Reports any missing data▪Automatically heals missing files▪Provides an audit of file availability▪Unique to Assureon

Guaranteed File Availability - Serialization Audit

1234

67

Missing

Page 18: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

18 ©2016 Nexsan. All Rights Reserved.

Enhanced Data Privacy

▪Audit Logs stored securely.▪Tamper Proof – files and

metadata are cryptographically chained together (US Patent 7,801,871 et al)▪Encryption at Rest with

unique key per file.▪Separation of Data –

physically and or logically.

Encryption + Authentication + Audit Logging =

Proper Chain of Custody

Page 19: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

Thank you!Storage Switzerlandhttp://[email protected]

StorageSwiss on Twitter:http://twitter.com/storageswiss

StorageSwiss on YouTube:http://www.youtube.com/user/storageswiss

Nexsanhttps://www.nexsan.com

Nexsan on Twitter:https://twitter.com/Nexsan

Nexsan on LinkedIn:https://www.linkedin.com/company/nexsan

Nexsan on Facebook:https://www.facebook.com/Nexsan

Page 20: Webinar: Ransomware - Five Reasons You’re Not As Protected As You Think

RansomwareFive Reasons You’re Not As Protected As You

Think

For Complete Audio and Q&A please register for the On-Demand Version at

http://bit.ly/Ransom5