Cloud

6/27/2017
08:00 AM
Kelly Sheridan
Kelly Sheridan
Slideshows
Connect Directly
Twitter
LinkedIn
Google+
RSS
E-Mail
50%
50%

9 Ways to Protect Your Cloud Environment from Ransomware

The same technology driving faster collaboration and data transfer also enables cybercriminals to quickly spread ransomware.
Previous
1 of 10
Next

(Image: Carlos Amarillo via Shutterstock)

(Image: Carlos Amarillo via Shutterstock)

Businesses are moving to the cloud, taking advantage of the increased speed and efficiency it provides for data transfer and collaboration. Unfortunately for them, threat actors are abusing the same technology to accelerate the spread of cybercrime.

Cloud Security Alliance CEO Jim Reavis says the intrinsic nature of the cloud, which makes it appealing to businesses, is also viewed by malicious actors as a "fast lane" for ransomware proliferation. The foundation for strong ransomware protection in the cloud is a clean, secure internal network.

"It is important to have the best internal network hygiene possible: least privilege network architectures, microsegmentation, disabling extraneous network services running on desktops is a must," he says.

In many ways, protecting your business from ransomware in the cloud isn't different from endpoint ransomware protection, says John Pironti, president of IP Architects. He emphasizes the importance of maintaining basic security practices to protect against ransomware.

"It's the basics that always solve the problem," he explains. Patching and hardening systems are especially critical regardless of where data is stored. "It's IT security hygiene. If you do these things, the other things are irrelevant."

However, many businesses are not properly protecting themselves, and are leaving their data vulnerable to potentially disastrous attacks.

"Ransomware is different than traditional confidentiality attacks that infosec has obsessed over for many years," says independent security consultant Gal Shpantzer. "It's an availability attack, but unlike, say, DDoS, the attack is more intrusive, shuts down servers and not just pipelines, and can destroy vast quantities of data if not properly restored."

Here, cloud security pros share their advice on how businesses can protect their cloud environments from ransomware, and what they should do to mitigate the effects of an attack after it occurs.

 

Kelly Sheridan is the Staff Editor at Dark Reading, where she focuses on cybersecurity news and analysis. She is a business technology journalist who previously reported for InformationWeek, where she covered Microsoft, and Insurance & Technology, where she covered financial ... View Full Bio

Previous
1 of 10
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
zkerravala
100%
0%
zkerravala,
User Rank: Author
7/19/2017 | 1:16:30 PM
Informative article
Almost every CISO Ive talked to struggles with ransomware.  There are some great tips in here, hopefully the audience will take them to heart 
Russia Hacked Clinton's Computers Five Hours After Trump's Call
Robert Lemos, Technology Journalist/Data Researcher,  4/19/2019
Tips for the Aftermath of a Cyberattack
Kelly Sheridan, Staff Editor, Dark Reading,  4/17/2019
Why We Need a 'Cleaner Internet'
Darren Anstee, Chief Technology Officer at Arbor Networks,  4/19/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
5 Emerging Cyber Threats to Watch for in 2019
Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-11498
PUBLISHED: 2019-04-24
WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised value" condition, which might allow attackers to cause a denial of service (application crash) via a DFF file that lacks valid sample-rate data.
CVE-2019-11490
PUBLISHED: 2019-04-24
An issue was discovered in Npcap 0.992. Sending a malformed .pcap file with the loopback adapter using either pcap_sendqueue_queue() or pcap_sendqueue_transmit() results in kernel pool corruption. This could lead to arbitrary code executing inside the Windows kernel and allow escalation of privilege...
CVE-2019-11486
PUBLISHED: 2019-04-23
The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0.8 has multiple race conditions.
CVE-2019-11487
PUBLISHED: 2019-04-23
The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hu...
CVE-2018-7576
PUBLISHED: 2019-04-23
Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of exploitation is: context-dependent.