eBooks/eGuides

20 Ransomware Defense For Dummies, Cisco Special Edition These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. and automated, rather than traditional point products. This new architecture » Automatically shares threat intelligence and provides aggregated, correlated context with other security products and services, both on premises and in the cloud » Reduces complexity and provides full visibility across the entire environment » Allows better integration with new and existing security investments using open, extensible standards and technology » Uses integration to deliver automated security response, so security becomes more effective and reduces the burden on other IT teams This new best-of-breed security architecture consists of the fol- lowing components (see Figure 3-2): » Next-generation firewalls (NGFWs) and next-generation intrusion prevention systems (NGIPSs) with visibility into who is accessing the network and what they're doing, policy enforcement, flow analytics, and file/device trajectory analysis » Cloud-based threat intelligence » Domain name system (DNS) layer security to extend protection beyond the organization's firewalls » Highly granular, software-defined network segmentation with role-based policy enforcement regardless of location, device, or IP address » Email and web security » Network and host-based advanced malware protection with sandboxing capabilities In Chapter 4, you learn about Cisco's approach to this new best- of-breed security architecture with Cisco Ransomware Defense.

• Cover
• Title Page
• Copyright Page
• Table of Contents
• Introduction
• About This Book
• Foolish Assumptions
• Icons Used in This Book
• Beyond the Book
• Chapter 1 What Is Ransomware?
• Defining Ransomware
• Recognizing Ransomware in the Modern Threat Landscape
• Understanding How Ransomware Operates
• Chapter 2 Implementing Best Practices to Reduce Ransomware Risks
• Before an Attack: Discover, Enforce, Harden
• During an Attack: Detect, Block, and Defend
• After an Attack: Scope, Contain, and Remediate
• Chapter 3 Building the "New Best-of-Breed" Security Architecture
• Recognizing the Limitations of Current Security Designs
• Defining the "New Best-of-Breed" Security Architecture
• Chapter 4 Deploying Cisco Ransomware Defense
• Leveraging DNS as the First Line of Defense in the Cloud
• Securing Endpoints and Addressing Email Threats
• Cisco Advanced Malware Protection (AMP) for Endpoints
• Cisco Email Security with Advanced Malware Protection (AMP)
• Protecting the Network with Next-Generation Firewalls and Segmentation
• Cisco Firepower Next-Generation Firewall (NGFW)
• Use the network as a sensor and enforcer
• Streamlining Deployments and Bolstering Incident Response
• Chapter 5 Ten Key Ransomware Defense Takeaways
• Ransomware Is Evolving
• Ransomware-as-a-Service Is an Emerging Threat
• Paying a Ransom Doesn't Solve Your Security Problems
• Build a Layered Security Architecture Based on Open Standards
• Deploy Integrated, Best-of-Breed Solutions
• Embed Security throughout Your Network Environment
• Reduce Complexity in Your Security Environment
• Leverage Cloud-Based, Real-Time Threat Intelligence
• Automate Security Actions to Reduce Response Time
• See Something, Say Something
• EULA