Minimizing the threat of Ransomware with enterprise file services
- 1. Enterprise File Services: Minimizing The Threat of Ransomware Trojans Jeff Denworth • SVP of Marketing, CTERA
- 2. KASPERSKY REPORT: IT THREAT EVOLUTION IN Q1 2016
- 3. critical considerations for enterprise data loss
- 8. The probability of a natural disaster is not zero, but is a statistically insignificant threat to enterprise business continuity, versus the #1 contributor to business data loss.
- 11. Source: IT Policy Compliance Group, 2015 75% of ALL data loss is due to human error
- 12. Q1 2015 Q2 2015 Q3 2015 Q4 2015 Q1 2016 RANSOMWARE REVENUE $24M in all of 2015 $209M Q1 2016 $1 Billion (est.) in 2016 35x y/y growth Asymptotic
- 17. Average Ransom: .5-2 Bitcoins (XBT) per Crypto-Locked Computer Low-End Ransom: $180 @ .5XBT/Computer High-End Ransom: $1,500 @ 2XBT/Computer
- 19. Ransomware Exposure Is Measured By: • # of Systems That Become Infected • Locky: 90K systems per day @ 0.5-1 Bitcoin ea (Forbes) • Operational Value of Infected Systems & Data
- 20. (rumored) Ransom of $3.4M 10-Day Data Outage Medical Records System Disabled Reverted To Pencil, Paper, Faxing Patients/Business Diverted Paid $17,000 in Bitcoins
- 21. Physical Firewalls & Email Security • Proper Employee Training Rule #1: Implement The Right Safeguards
- 22. constant updating; open source derivatives CryptXXX source: http://trewmte.blogspot.com
- 23. Tips for Dealing with the Ransomware Threat Prevention Efforts - Make sure employees are aware of ransomware and of their critical roles in protecting the organization’s data. - Patch operating system, software, and firmware on digital - Ensure antivirus and anti-malware solutions auto update - Manage the use of privileged accounts - Configure access controls, including file, directory, and network share permissions appropriately. - Disable macro scripts from office files transmitted over e-mail. - Implement software restriction policies or other controls to prevent programs from executing from common ransomware locations (e.g., temporary folders supporting popular Internet browsers, compression/decompression programs). Business Continuity Efforts - Back up data regularly and verify the integrity of those backups regularly. - Secure your backups. Make sure they aren’t connected to the computers and networks they are backing up. Source: FBI, “Incidents of Ransomware on the Rise” www.fbi.gov
- 24. Legacy Solutions Are Built To Back Up In 24+ Hour Increments Legacy IT Solutions Make Backup Rules Difficult To Enforce For Mobile Workers Lack of Source-Based, Global & Block-Based Dedupe = 2-5x Slower Eg. HP Connected Backup Scheduler
- 25. Low Overhead (<2% CPU, 50KB RAM) • Global, Source-Based Deduplication • Service Continuance Rule #2: Recover Systems With Modern Tools
- 26. Fun With ‘Delayed Execution’ The CryptXXX Ransomware downloads a delayed execution DLL file, which waits more than 60 minutes before launching on the victim's computer. After the time has elapsed, CryptXXX carries out its attack, encrypting the victim's files and collecting important data and money in the form of Bitcoins. • makes it harder for the victims to connect the incident to the source of infection. • Delayed execution is also a known VM evasion technique
- 27. The Three Areas CTERA Focuses On Business Continuity endpoints offices cloud servers file sharing & data protection file servers & data protection data protection only
- 28. AVG TIME TO FILE VERSION Sync Average Case: Sub-5 Minutes Backup Average Case: Once Every 24 Hours 24 Hour Period Threat Minimized 23+ hrs of exposure contained
- 29. Rule #3. Sync (Apologies to the FBI) OK, Yes.... Please Backup Recover Your System To A Consistent State In The Case Of Full Disk Crypto But, Seriously … Sync. A Day Is 1/250th Of A Work Year! Sync is A Form Of Backup
- 31. Limitless File Versioning Push-Button Restore of Backups or Versions Backups = 1-24hr Granularity • Shares = 5 Minute Granularity
- 32. App for all leading smartphones and tablets: Anywhere data access. Even when your PC is bricked Access data from any web browser, recover files instantly.
- 33. Embedded Anti-Virus Scanning Upon File Download • Supplements A Strong Firewall Rule #4: Care For What You Share
- 34. Does Cloud-Enabled File Sharing Increase The Blast Radius? Con: Sharing is easer than ever. Pro: - Central Governance - Global Scanning - Global Roll-Back Not Really. Collaboration Isn’t New. Benefits Far Outweigh…
- 35. 1 Fortify The Perimeter • Train Everyone 2 Use Modern Backup To Ensure RPO 3 Sync To Minimize The Blast Radius 4 Care About What You Share
- 36. Eliminate the threat of any natural or man made data disaster. Recover data in real time using secure, cost-effective cloud technologies.
- 37. Questions?
Editor's Notes
- #4: The cloud is challenging every aspect of how organizations deal with user file storage, collaboration, office storage and data protection Organizations are now looking for smarter, less expensive tools that make them more agile IT-as-a-Service providers Anymore, users are looking for apps and cloud-integrated services that redefine both economics and service levels in the enterprise This is CTERA’s focus, we believe a $15B market is being turned upside down by ‘cloud’ and CTERA is at the center of the action
- #5: The cloud is challenging every aspect of how organizations deal with user file storage, collaboration, office storage and data protection Organizations are now looking for smarter, less expensive tools that make them more agile IT-as-a-Service providers Anymore, users are looking for apps and cloud-integrated services that redefine both economics and service levels in the enterprise This is CTERA’s focus, we believe a $15B market is being turned upside down by ‘cloud’ and CTERA is at the center of the action
- #6: The cloud is challenging every aspect of how organizations deal with user file storage, collaboration, office storage and data protection Organizations are now looking for smarter, less expensive tools that make them more agile IT-as-a-Service providers Anymore, users are looking for apps and cloud-integrated services that redefine both economics and service levels in the enterprise This is CTERA’s focus, we believe a $15B market is being turned upside down by ‘cloud’ and CTERA is at the center of the action
- #7: The cloud is challenging every aspect of how organizations deal with user file storage, collaboration, office storage and data protection Organizations are now looking for smarter, less expensive tools that make them more agile IT-as-a-Service providers Anymore, users are looking for apps and cloud-integrated services that redefine both economics and service levels in the enterprise This is CTERA’s focus, we believe a $15B market is being turned upside down by ‘cloud’ and CTERA is at the center of the action
- #8: The cloud is challenging every aspect of how organizations deal with user file storage, collaboration, office storage and data protection Organizations are now looking for smarter, less expensive tools that make them more agile IT-as-a-Service providers Anymore, users are looking for apps and cloud-integrated services that redefine both economics and service levels in the enterprise This is CTERA’s focus, we believe a $15B market is being turned upside down by ‘cloud’ and CTERA is at the center of the action
- #9: The cloud is challenging every aspect of how organizations deal with user file storage, collaboration, office storage and data protection Organizations are now looking for smarter, less expensive tools that make them more agile IT-as-a-Service providers Anymore, users are looking for apps and cloud-integrated services that redefine both economics and service levels in the enterprise This is CTERA’s focus, we believe a $15B market is being turned upside down by ‘cloud’ and CTERA is at the center of the action
- #10: The cloud is challenging every aspect of how organizations deal with user file storage, collaboration, office storage and data protection Organizations are now looking for smarter, less expensive tools that make them more agile IT-as-a-Service providers Anymore, users are looking for apps and cloud-integrated services that redefine both economics and service levels in the enterprise This is CTERA’s focus, we believe a $15B market is being turned upside down by ‘cloud’ and CTERA is at the center of the action
- #11: The cloud is challenging every aspect of how organizations deal with user file storage, collaboration, office storage and data protection Organizations are now looking for smarter, less expensive tools that make them more agile IT-as-a-Service providers Anymore, users are looking for apps and cloud-integrated services that redefine both economics and service levels in the enterprise This is CTERA’s focus, we believe a $15B market is being turned upside down by ‘cloud’ and CTERA is at the center of the action
- #12: The cloud is challenging every aspect of how organizations deal with user file storage, collaboration, office storage and data protection Organizations are now looking for smarter, less expensive tools that make them more agile IT-as-a-Service providers Anymore, users are looking for apps and cloud-integrated services that redefine both economics and service levels in the enterprise This is CTERA’s focus, we believe a $15B market is being turned upside down by ‘cloud’ and CTERA is at the center of the action
- #22: The cloud is challenging every aspect of how organizations deal with user file storage, collaboration, office storage and data protection Organizations are now looking for smarter, less expensive tools that make them more agile IT-as-a-Service providers Anymore, users are looking for apps and cloud-integrated services that redefine both economics and service levels in the enterprise This is CTERA’s focus, we believe a $15B market is being turned upside down by ‘cloud’ and CTERA is at the center of the action