Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
The sooner you know about a problem, the sooner you can implement a disaster recovery plan and mitigate the damage. Pierson notes antivirus is a good first line of defense for endpoint protection, especially when configured according to specialized guides to protect certain file locations.
In addition, he says, there are several controls businesses can use to scan for files being encrypted en masse. Teams should be reviewing all of their controls, and using network or behavioral tools to accurately identify and block suspicious activity.
"Companies need to make sure they have the traditional signature-based defenses in place, but they must also have network anomaly-based tools that can sense the rapid encryption of system resources and shut down an attack in progress," Pierson says.
(Image: Sergey Nivens via Shutterstock)
7 New Cybersecurity Vulnerabilities That Could Put Your Enterprise at RiskIn this Dark Reading Tech Digest, we look at the ways security researchers and ethical hackers find critical vulnerabilities and offer insights into how you can fix them before attackers can exploit them.
The Changing Face of Threat Intelligence
This special report takes a look at how enterprises are using threat intelligence, as well as emerging best practices for integrating threat intel into security operations and incident response. Download it today!
Tweet This
17 Comments
