How to Ransomware-Proof your AWS Cloud
- 9. AFTER THE WEBINAR PLEASE FILL OUT OUR SURVEY! WE VALUE YOUR
- 10. Ransomware-Proof Your AWS Cloud with the Ultimate Disaster Recovery Strategy Brought to you by:
- 11. Today’s expert presenters #1 AWS Backup Vitaly Lyaskovsky • Director of Technical Support at N2WS • Cloud & Disaster Recovery Expert • 20+ years of experience specializing in Cloud/Enterprise Security solutions • Previously at IBM, FilesX, Intel
- 12. Today’s expert presenters #1 AWS Backup Mike Somerville • Chief Cloud Evangelist & IT Manager of Systems/Support University of San Diego • 20+ years experience in leading the adoption of cloud services and providing innovative cloud solutions • Founder and Chief Architect at several cloud computing consulting firms
- 13. Understanding the Risk of Ransomware #1 AWS Backup
- 14. The costly growth of cyber-crime #1 AWS Backup Ransomware is the fastest growing type of cybercrime. $20 billion in 2021. This is up from just $325 million in 2015.
- 15. The evolution of ransomware #1 AWS Backup Ransomware is a top concern for organizations with CryptoLocker (2014), Petya (2016), WannaCry (2017), notPetya (2017), Ryuk (2019) First instance of ransomware (1989) had simple encryption tools and user interaction was necessary. Now more complicated, using complex algorithms, no interaction necessary. Ransomware = malicious code designed to gain unauthorized data access and encrypt data to block access by legitimate users Current trends include RaaS, cryptocurrency mining
- 16. Concerning ransomware stats #1 AWS Backup A company gets hit every 40 seconds 50% of organizations attacked by ransomware are hit more than once $532,914 is the average ransomware recovery cost 23 days is the average amount of time to recover data! ! ! !
- 17. The biggest cost isn’t the ransom #1 AWS Backup • Data damage • Restoration of host systems and data • Downtime due to attacks (no productivity/revenue) • Forensic investigation • Damage to the reputations of victims Downtime creates loss of productivity of users and responders, exposure of sensitive data, loss of revenue – current and future costs include: *Loss of productivity & non-availability is the primary business impact of ransomware
- 18. The Code Spaces nightmare #1 AWS Backup Code Spaces went out of business 12 hours after the attack took place Backups were performed BUT cross account backups were not created
- 19. NotPetya forced shipping giant Maersk to reinstall 4,000 servers and 45,000 PCs for $300 million due to "serious business interruption” #1 AWS Backup Baltimore ransomware attack will cost the city over $18 million (and counting...) Riviera Beach and Lake City Florida will pay hackers $1M combined to (maybe?) get its computer systems back What about more recent attacks? *All attacks were due to lack of strong security/backup practices ! ! !
- 20. To pay or not to pay the ransom? #1 AWS Backup MYTH: Paying ransom guarantees your data back Only 42% of companies report being able to fully recover data after an attack Many times bad guys will attack a 2nd time knowing they can extort another payment TRUTH: The only guarantee of returning your data is to have a reliable backup & recovery solution in place.
- 21. The Need for Backup and Restore on AWS #1 AWS Backup
- 22. Do I really need to backup in AWS? #1 AWS Backup MYTH: I don’t need to backup Amazon EBS, because it’s so redundant I’ll never lose data TRUTH: EBS is designed for an annual failure rate of about 1/1000. But more common than that are these risks…
- 23. AWS Shared Responsibility Model AWS provides the virtual hardware and protects that infrastructure But the data you store within it is YOUR responsibility –this often goes unrealized #1 AWS Backup
- 24. How does data loss happen in the cloud? #1 AWS Backup Compliance + Data Security EBS Failure Ransomware AZ Failure Human Error/ Malicious intent
- 25. Reduce the Risk of a Ransomware Attack #1 AWS Backup
- 26. Internal Awareness #1 AWS Backup Get training! Have a security awareness person/program to deploy regular phishing tests. (Phishing emails are becoming both more clever and pervasive). Implement anti-phishing software in your backend. Improve user awareness Phishing
- 27. Prevention #1 AWS Backup Install anti-malware software Engage email filtering, web blocking, etc. Keep your software and hardware up to date Improve both backend and end-user technologies: Malware
- 28. “Ransomware-Proofing” your Cloud with AWS Backup & Recovery #1 AWS Backup
- 29. #1 AWS Backup
- 30. Backup Terms RTO – Recovery Time Objective RPO – Recovery Point Objective Application Consistent Backup – Quickly “quiesce” the applications to allow complete backups that capture all transactions in process Crash Consistent Backup –General backup of instances, to restore as if the power cord had been pulled Offsite Backup – Backups that are stored in a physically distinct location to the production environment #1 AWS Backup
- 31. AWS global infrastructure 21 regions worldwide, 66 availability zones, 180 POPs • Latency • Compliance • Cost Select your region based on: #1 AWS Backup
- 32. Some benefits of backup and restore on AWS #1 AWS Backup Usage-based fees pay ONLY for what you’re using each month Low cost Scale automatically no need to manually scale up or scale down Scalable Hardware-free no need to buy/maintain on- premises hardware Easy Encrypt data to tightly control access and increase security Secure
- 33. About N2WS HQ Palm Beach FL | USA Edinburgh UK Haifa Israel • Founded in 2012 • #1 Backup & Recovery Solution on the AWS Marketplace • Purpose-built for AWS • Distributed via AWS Marketplace #1 AWS Backup
- 34. The “promise of the cloud”, delivered #1 AWS Backup
- 35. Used by AWS builders, worldwide AWS Accounts 5K+ Petabytes of Backup 13+ HUNDREDS of THOUSANDS of Protected Instances #1 AWS Backup
- 36. Your giant recovery button Automated policies and schedules Configure what to back up and when - define backup targets, set backup frequency and retention periods Cross-region & cross- account DR Replicate snapshots to one more regions and recover quickly in the event of an issue VPC Capture and clone Configure regular backups of VPC settings and recover to any region #1 AWS Backup
- 37. Protect against regional outages #1 AWS Backup Use cross-region DR • Protect against region failure
- 38. Protect against account compromises #1 AWS Backup Use cross-account DR • Protect against account compromise
- 39. Protect against ANY type of data loss #1 AWS Backup Use BOTH cross-region and cross-account DR to create a highly secure “Snapshot Vault” • Protect against BOTH region failure and account compromise
- 40. Top cost saving features Archive snapshots to S3 buckets Save big on your AWS storage bill by copying EBS snapshots to a low-cost S3 repository Start/stop instances on demand Stay compliant for less Store data for as long as you need while paying a third of the standard cost Reduce your AWS bill by turning off non-critical EC2/RDS instances automatically or on-demand #1 AWS Backup
- 41. How University of San Diego Ransomware-Proofed Using AWS & N2WS #1 AWS Backup
- 42. Servers (Linux & Windows) 500 Onsite data centers 4 Offsite data center 1 Journey to the Cloud #1 AWS Backup Main ERM Systems 2 Students 8900
- 43. Recoverability #1 AWS Backup Ransomware attacks will continue to adapt and evolve. All enterprise data should be backed up, available and recoverable. Have a recovery scenario in place with frequent backups, minimal manual interference, minimal RTO, and minimal downtime
- 44. Production Account Region 1 - CA Region 2 - OR Amazon EC2 instances #1 AWS Backup Basic DR Strategy using N2WS AWS EBS Snapshots Amazon RDS instances AWS EBS Snapshots Development Account Region 1 - CA Region 2 - OR Amazon EC2 instances AWS EBS Snapshots Amazon RDS instances AWS EBS Snapshots Using AWS Snapshots to backup EC2 and RDS Backup volume snapshot scheduled 2x/day Crash-consistent + application-consistent on backup volume
- 45. #1 AWS Backup Main advantages of N2WS With archive-to-S3 & Resource Control you can save up to 60% on costs Cost Savings Responsive support and customer- focused product roadmap Customer focused Easy install from AWS Marketplace takes less than 30 minutes to deploy Deployment Ease Near-instant recovery of entire volumes or single files in 1 click Disaster Recovery
- 46. The N2WS Advantage and an End to Downtime #1 AWS Backup
- 47. The Problem Modern ransomware attacks disable known backup products before encrypting data. #1 AWS Backup
- 48. #1 AWS Backup Even if your N2WS Server is somehow compromised - a new N2WS server can restore from snapshots that were created by an old N2WS Server, using metadata that is automatically backed up already. And N2WS backups can be restored even without N2WS - using EC2 console (for native snapshots) or Veeam B&R (for S3). N2WS: Your Ransomware Secret Weapon
- 49. #1 AWS Backup N2WS Advantages Against Ransomware Backups aren't kept on any Windows/Linux machine, or network share – so an attacker can't destroy them! Backups can continue to run even if N2WS Agent is disabled Even without an active Agent, backups are fully restorable
- 50. Key Takeaways Cloud environments need a reliable, flexible and automated solution to manage backups N2WS Backup & Recovery provides an easy, scalable and efficient way to manage snapshot-based backup in AWS The best ammo to disrupt Ransomware is to take regular backups and have a rapid DR plan in place #1 AWS Backup
- 51. Email us with any questions: info@n2ws.com Please take 1 minute to fill out our survey! Talk to us! Sign up for our fully-featured v2.6 solution by spinning up a 30-day FREE TRIAL n2ws.com/trial #1 AWS Backup Stay tuned for our upcoming Ransomware webinar Part 2!