eBooks/eGuides

CHAPTER 3 Building the "New Best-of-Breed" Security Architecture 21 These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. FIGURE 3-2: The "new best-of-breed" security architecture provides the best threat surface coverage possible with defense-in-depth. CAMUTO GROUP DEFENDS INTELLECTUAL PROPERTY WITHOUT COMPROMISING PRODUCTIVITY The challenge: Creative business must balance ease of access with protection of design assets The Camuto Group, a footwear and lifestyle brand company with stores throughout the United States and Europe, and manufacturing facilities in Brazil, Italy and China, thrives by virtue of its unique designs. Creativity is the company's most powerful competitive weapon, but for its IT security professionals, it's a double-edged sword: Camuto's 500 employees, 100 of whom work remotely, and another 250 roaming laptops must be guarded against data theft; yet its cre- ative and sales professionals need unfettered access to a wide range of edgy websites that many web filtering solutions block incorrectly. "Protecting Camuto Group's products through security is one of our pri- mary goals," says Tom Olejniczak, Camuto Group's network engineering manager. "Our products and designs are what drive the company; pro- tecting these assets are a key to successfully supporting the business." In previous assignments, Olejniczak found that the traditional approach to securing the web experience — proxy servers — imposed obstacles that had to be resolved manually. "Many nonmalicious websites are (continued)

• Cover
• Title Page
• Copyright Page
• Table of Contents
• Introduction
• About This Book
• Foolish Assumptions
• Icons Used in This Book
• Beyond the Book
• Chapter 1 What Is Ransomware?
• Defining Ransomware
• Recognizing Ransomware in the Modern Threat Landscape
• Understanding How Ransomware Operates
• Chapter 2 Implementing Best Practices to Reduce Ransomware Risks
• Before an Attack: Discover, Enforce, Harden
• During an Attack: Detect, Block, and Defend
• After an Attack: Scope, Contain, and Remediate
• Chapter 3 Building the "New Best-of-Breed" Security Architecture
• Recognizing the Limitations of Current Security Designs
• Defining the "New Best-of-Breed" Security Architecture
• Chapter 4 Deploying Cisco Ransomware Defense
• Leveraging DNS as the First Line of Defense in the Cloud
• Securing Endpoints and Addressing Email Threats
• Cisco Advanced Malware Protection (AMP) for Endpoints
• Cisco Email Security with Advanced Malware Protection (AMP)
• Protecting the Network with Next-Generation Firewalls and Segmentation
• Cisco Firepower Next-Generation Firewall (NGFW)
• Use the network as a sensor and enforcer
• Streamlining Deployments and Bolstering Incident Response
• Chapter 5 Ten Key Ransomware Defense Takeaways
• Ransomware Is Evolving
• Ransomware-as-a-Service Is an Emerging Threat
• Paying a Ransom Doesn't Solve Your Security Problems
• Build a Layered Security Architecture Based on Open Standards
• Deploy Integrated, Best-of-Breed Solutions
• Embed Security throughout Your Network Environment
• Reduce Complexity in Your Security Environment
• Leverage Cloud-Based, Real-Time Threat Intelligence
• Automate Security Actions to Reduce Response Time
• See Something, Say Something
• EULA