eBooks/eGuides

CHAPTER 4 Deploying Cisco Ransomware Defense 25 These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. Deploying Cisco Ransomware Defense C isco Ransomware Defense leverages the Cisco security architecture and Talos threat research to protect enter- prises. This solution offers an architectural approach to combat ransomware in all the places it attempts to attack a net- work. This means layered, complementary protection extending from the DNS layer to email, the network, and the endpoint. In this chapter, you learn about the Cisco Ransomware Defense solution. Leveraging DNS as the First Line of Defense in the Cloud There are many phases in a ransomware attack. Before launch- ing an attack, the attacker needs to stage Internet infrastructure to support the execution and command-and-control (C2) phases. Cisco Umbrella provides the first line of defense, stopping ran- somware attacks (and other cyberattacks) earlier in the kill chain by blocking Internet connections to malicious sites serving up ransomware in the first place. Built into the foundation of the Chapter 4 IN THIS CHAPTER » Taking ransomware defense to the cloud » Closing ransomware attack vectors on endpoints and in email » Enforcing security policies with next- generation firewalls and segmentation » Engaging Cisco Security Advisory Services

• Cover
• Title Page
• Copyright Page
• Table of Contents
• Introduction
• About This Book
• Foolish Assumptions
• Icons Used in This Book
• Beyond the Book
• Chapter 1 What Is Ransomware?
• Defining Ransomware
• Recognizing Ransomware in the Modern Threat Landscape
• Understanding How Ransomware Operates
• Chapter 2 Implementing Best Practices to Reduce Ransomware Risks
• Before an Attack: Discover, Enforce, Harden
• During an Attack: Detect, Block, and Defend
• After an Attack: Scope, Contain, and Remediate
• Chapter 3 Building the "New Best-of-Breed" Security Architecture
• Recognizing the Limitations of Current Security Designs
• Defining the "New Best-of-Breed" Security Architecture
• Chapter 4 Deploying Cisco Ransomware Defense
• Leveraging DNS as the First Line of Defense in the Cloud
• Securing Endpoints and Addressing Email Threats
• Cisco Advanced Malware Protection (AMP) for Endpoints
• Cisco Email Security with Advanced Malware Protection (AMP)
• Protecting the Network with Next-Generation Firewalls and Segmentation
• Cisco Firepower Next-Generation Firewall (NGFW)
• Use the network as a sensor and enforcer
• Streamlining Deployments and Bolstering Incident Response
• Chapter 5 Ten Key Ransomware Defense Takeaways
• Ransomware Is Evolving
• Ransomware-as-a-Service Is an Emerging Threat
• Paying a Ransom Doesn't Solve Your Security Problems
• Build a Layered Security Architecture Based on Open Standards
• Deploy Integrated, Best-of-Breed Solutions
• Embed Security throughout Your Network Environment
• Reduce Complexity in Your Security Environment
• Leverage Cloud-Based, Real-Time Threat Intelligence
• Automate Security Actions to Reduce Response Time
• See Something, Say Something
• EULA