[PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The...

20
exagrid.com | 1 Backup School www.exagrid.com Atlanta 2017 Secure Data – a safe place in an unsafe world!

Transcript of [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The...

Page 1: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 1

Backup School

www.exagrid.com

Atlanta 2017

Secure Data – a safe place in an unsafe world!

Page 2: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 2

Agenda

• A company’s most important asset

• Backup Storage Choices

• 3-2-1 Backup Rule

• Traditional Backup Storage Challenges

• Deduplication – Good or Bad?

• Backup-to-disk Appliances

• Ransomware

Page 3: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 3

What is a company’s most important asset?

Employees?

Patents?

Reputation?

DATA

Page 4: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 4

What Are Your Choices For Backup Storage

Tape

Disk

Disk Backup with Deduplication

Cloud

Page 5: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 5

Tape for Backup

Performance – Slow backup and restore

Reliability – Less than disk

Cost – Low to moderate

Where does Tape fit?

• Long-term “regulatory” retention

• “Archive”

Page 6: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 6

Disk for Backup

Performance - Fast

Reliability - High

Cost - High

Where does Disk fit?

• Primary storage

Page 7: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 7

Disk Backup with Deduplication

Performance – moderate to fast

Reliability - high

Cost – low to high

Where does Disk backup with Deduplication fit?

• “Operational” retention

• “Regulatory” retention

Page 8: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 8

Cloud for Backup

Performance - slow

Reliability - high

Cost – moderate to high

Where does Cloud fit?

• DR or “archive” copy of backups

Page 9: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 9

3-2-1 Backup Rule

Maintain at least three copies of your backups

Store backups on at least two different types of media

Keep one of the backups at a different location1

2

3

Page 10: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 10

Traditional Backup Storage Challenges

As data grows:• Time to backup grows• Time to restore grows• Time to offsite grows

• System breaks – Resulting in disruptive fork lift upgrade

1

2

Page 11: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 11

5 Considerations of Data Deduplication

Page 12: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 12

Disk Backup with Deduplication

Architectural Approaches

• Deduplication in the backup software to straight disk

• Inline deduplication with scale-up

• Landing zone with scale-out

Page 13: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 13

Challenges of Software-based Deduplication

• Deduplication in the media server

• All data stored deduplicated

• Deduplication ratios are low

• Limited scalability

Page 14: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 14

Inline Scale-up Appliances Fall Short

• Inline deduplication on the way to disk

• All data is stored in deduplicated form

• As data grows, only disk is added

• Restores are slow as data needs rehydration

Page 15: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 15

Fastest Backups and Shortest Backup Window

Unique landing zone• Write backups direct to disk• Adaptive deduplication

Benefits• Fastest backups• Shortest possible backup window• Strong offsite RPO

Page 16: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 16

Fast Restores, VM Boots in Seconds to Minutes

Unique landing zone• Most recent backups are in

undeduplicated form• Eliminates data rehydration

Benefits• Restores as fast as disk• Tape copies as fast as disk• VM boots in seconds to minutes

Page 17: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 17

DR Scenarios

Data Center

Infrastructure to a Backup App

2nd Site

Hosted Co-Location

Hybrid Cloud

Public Cloud

Page 18: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 18

Insulating your company from Ransomware

The true cost of a ransomware goes far beyond the ransom• lost productivity • loss of data• loss of customer confidence• Go right out of business

Page 19: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 19

Protecting your company from Ransomware Backup your data

• Maintain at least three copies of your backups• Store backups on at least two different types of media• Keep one of the backups at a different location• Encrypt your backups at rest• Tape

Educate employee to just “ignore” suspicious emails or links• Test emails• Simulated attacks

Patch systems regularly Block appropriately (FW) Antivirus software

Page 20: [PPT]Presentation Title - Data Connectors · Web viewInsulating your company from Ransomware The true cost of a ransomware goes far beyond the ransom lost productivity loss of data

exagrid.com | 20

ExaGrid / Stress-Free Backup Storage

Thank [email protected]


Intro to Reverse Engineering and Malware Analysis · Malware Types (What) Ransomware •Encrypts all files and demands ransom •Example: WannaCry, (Not)Petya, TeslaCrypt RAT/Backdoor

Intro to Reverse Engineering and Malware Analysis · Malware Types (What) Ransomware •Encrypts all files and demands ransom •Example: WannaCry, (Not)Petya, TeslaCrypt RAT/Backdoor

Ransomware: Modern Day PiratesRansomware • What is ransomware • History of ransomware • Actors and their motivations • Anatomy of a ransomware attack • Cost of a ransomware

Ransomware: Modern Day PiratesRansomware • What is ransomware • History of ransomware • Actors and their motivations • Anatomy of a ransomware attack • Cost of a ransomware

Heat Software Cloudsec 2016€¦ · Ransomware is a type of malware that holds to ransom an infected computer system in some way, and demands that the user pay a monetary ransom to

Heat Software Cloudsec 2016€¦ · Ransomware is a type of malware that holds to ransom an infected computer system in some way, and demands that the user pay a monetary ransom to

Update on Ransomware Technology · Example 1 Example 2 Beware of attachments! Beware of sender & links! Update on Ransomware Technology Sample Ransom Demand. Whaling Emails Enter

Update on Ransomware Technology · Example 1 Example 2 Beware of attachments! Beware of sender & links! Update on Ransomware Technology Sample Ransom Demand. Whaling Emails Enter

Cyber Ransom Survival Guide - ITWebv2.itweb.co.za/whitepaper/Radware_Cyber_Ransom_eBook.pdfRansomware-as-a-Service New types of ransomware are cropping up quickly—taxing antivirus

Cyber Ransom Survival Guide - ITWebv2.itweb.co.za/whitepaper/Radware_Cyber_Ransom_eBook.pdfRansomware-as-a-Service New types of ransomware are cropping up quickly—taxing antivirus

Comparative analysis of various ransomware virii · encryption as an extortion mean. Basically, they encrypt var-ious files on victim’s hard drives before asking for a ransom to

Comparative analysis of various ransomware virii · encryption as an extortion mean. Basically, they encrypt var-ious files on victim’s hard drives before asking for a ransom to

PREVENT Don’t Reactstatic.us.zyxel.com/landing_page/2017/ransomware/Ransomware_Inf… · paid in ransom by companies in Q1 $209 Million NEW families of ransomware 62 ransomware

PREVENT Don’t Reactstatic.us.zyxel.com/landing_page/2017/ransomware/Ransomware_Inf… · paid in ransom by companies in Q1 $209 Million NEW families of ransomware 62 ransomware

Ransomware - NIST Computer Security Resource Center · demand soared in 2016. o Once infected many threats raise price if ransom not paid by deadline o Some criminals will negotiate

Ransomware - NIST Computer Security Resource Center · demand soared in 2016. o Once infected many threats raise price if ransom not paid by deadline o Some criminals will negotiate

Recovering Your Customers From Ransomware Without Paying Ransom

Recovering Your Customers From Ransomware Without Paying Ransom

Avaddon Ransomware · The ransomware also creates a file containing the ransom note in every directory it encrypts, named [0-9]+-readme.html. The ransom message directs the users

Avaddon Ransomware · The ransomware also creates a file containing the ransom note in every directory it encrypts, named [0-9]+-readme.html. The ransom message directs the users

Holding healthcare to ransom - Marsh & McLennan …...of healthcare customers’ businesses was $68 million EB 2017 MAY 2017 Hospitals globally were hit by the global ransomware attack

Holding healthcare to ransom - Marsh & McLennan …...of healthcare customers’ businesses was $68 million EB 2017 MAY 2017 Hospitals globally were hit by the global ransomware attack

RANSOMWARE - Niagara College · • You may be extorted for more money after the original ransom is paid. • You can make yourself a future target. • Extortion via Ransomware is

RANSOMWARE - Niagara College · • You may be extorted for more money after the original ransom is paid. • You can make yourself a future target. • Extortion via Ransomware is

APAC MSP Ransomware Research - Datto€¦ · against ransomware attacks For those customers who fell victim to ransomware, ... can be costly, but not back breaking If a ransom was

APAC MSP Ransomware Research - Datto€¦ · against ransomware attacks For those customers who fell victim to ransomware, ... can be costly, but not back breaking If a ransom was

GNISREVER A POLYMORPHIC FILE-INFECTING RANSOMWARE … 1... · Malware Honeycomb virus POS bot botnet worm ransom ware . 5 trojan script/ macro Virlock virus POS bot botnet worm ransom

GNISREVER A POLYMORPHIC FILE-INFECTING RANSOMWARE … 1... · Malware Honeycomb virus POS bot botnet worm ransom ware . 5 trojan script/ macro Virlock virus POS bot botnet worm ransom

HELD FOR RANSOM - SecTor 2018 · What is Ransomware? • Windows ransomware, such as Cryptolocker, Cryptowall, Locky, and Samas, does not bother to steal your critical files (Office

HELD FOR RANSOM - SecTor 2018 · What is Ransomware? • Windows ransomware, such as Cryptolocker, Cryptowall, Locky, and Samas, does not bother to steal your critical files (Office

Proofpoint Ransomware Survival Guide · According to the FBI, ransomware attackers collected more than $209 million in ransom during the first three months of 2016 alone, with the

Proofpoint Ransomware Survival Guide · According to the FBI, ransomware attackers collected more than $209 million in ransom during the first three months of 2016 alone, with the

Privacy for iTED - Norma Smithnormasmith.houserepublicans.wa.gov/wp-content/uploads/sites/39/2… · 45% of US companies hit with a ransomware attack last year paid at least one ransom,

Privacy for iTED - Norma Smithnormasmith.houserepublicans.wa.gov/wp-content/uploads/sites/39/2… · 45% of US companies hit with a ransomware attack last year paid at least one ransom,

RANSOMWARE: A RISING THREAT....Ransomware is a type of malicious program that encrypts files on a victim’s computer, blocking the access to the contents of the device until a ransom

RANSOMWARE: A RISING THREAT....Ransomware is a type of malicious program that encrypts files on a victim’s computer, blocking the access to the contents of the device until a ransom

Ransom Oaks Community Corporation . 101 Ransom Oaks Drive ...ransomoaks.com/wp-content/uploads/newsletter/2014... · Ransom Oaks Community Corporation . 101 Ransom Oaks Drive . East

Ransom Oaks Community Corporation . 101 Ransom Oaks Drive ...ransomoaks.com/wp-content/uploads/newsletter/2014... · Ransom Oaks Community Corporation . 101 Ransom Oaks Drive . East

Ransom Oaks All Ransom Oaks Pools Who-to-Call Openransomoaks.com/wp-content/uploads/newsletter/1908... · RANSOM OAKS NEWS 2 Ransom Oaks Board of Directors RANSOM OAKS is a planned

Ransom Oaks All Ransom Oaks Pools Who-to-Call Openransomoaks.com/wp-content/uploads/newsletter/1908... · RANSOM OAKS NEWS 2 Ransom Oaks Board of Directors RANSOM OAKS is a planned