eBooks/eGuides

26 Ransomware Defense For Dummies, Cisco Special Edition These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. Internet, Umbrella enforces security at the domain name system (DNS) and Internet Protocol (IP) layers (see Figure 4-1). Umbrella delivers complete visibility into Internet activity across all locations, devices, and users, and blocks threats over any port or protocol before they ever reach your network or endpoints. By analyzing and learning from Internet activity patterns, Umbrella automatically uncovers attacker infrastructure staged for current and emerging threats, and proactively blocks requests to mali- cious destinations before a connection is even established or a malicious file downloaded. Umbrella can also block C2 callbacks to attackers' servers and stop compromised systems from exfil- trating data. With Umbrella, you can stop phishing and malware infections earlier, identify already infected devices faster, and prevent data exfiltration. Unlike appliances, the cloud service protects endpoints both on and off the corporate network. Unlike agents, DNS layer protec- tion extends to every device connected to the network — even the Internet of Things (IoT). It is the fastest and easiest way to protect all of your users and can be deployed in as little as 30 minutes. Download the whitepaper: "Why a DNS Layer Matters: 30 Minutes to a More Secure Enterprise" at http:// cs.co/30-mins-to-a-more-secure-enterprise to learn more. FIGURE 4-1: DNS is the first line of defense against ransomware attacks.

• Cover
• Title Page
• Copyright Page
• Table of Contents
• Introduction
• About This Book
• Foolish Assumptions
• Icons Used in This Book
• Beyond the Book
• Chapter 1 What Is Ransomware?
• Defining Ransomware
• Recognizing Ransomware in the Modern Threat Landscape
• Understanding How Ransomware Operates
• Chapter 2 Implementing Best Practices to Reduce Ransomware Risks
• Before an Attack: Discover, Enforce, Harden
• During an Attack: Detect, Block, and Defend
• After an Attack: Scope, Contain, and Remediate
• Chapter 3 Building the "New Best-of-Breed" Security Architecture
• Recognizing the Limitations of Current Security Designs
• Defining the "New Best-of-Breed" Security Architecture
• Chapter 4 Deploying Cisco Ransomware Defense
• Leveraging DNS as the First Line of Defense in the Cloud
• Securing Endpoints and Addressing Email Threats
• Cisco Advanced Malware Protection (AMP) for Endpoints
• Cisco Email Security with Advanced Malware Protection (AMP)
• Protecting the Network with Next-Generation Firewalls and Segmentation
• Cisco Firepower Next-Generation Firewall (NGFW)
• Use the network as a sensor and enforcer
• Streamlining Deployments and Bolstering Incident Response
• Chapter 5 Ten Key Ransomware Defense Takeaways
• Ransomware Is Evolving
• Ransomware-as-a-Service Is an Emerging Threat
• Paying a Ransom Doesn't Solve Your Security Problems
• Build a Layered Security Architecture Based on Open Standards
• Deploy Integrated, Best-of-Breed Solutions
• Embed Security throughout Your Network Environment
• Reduce Complexity in Your Security Environment
• Leverage Cloud-Based, Real-Time Threat Intelligence
• Automate Security Actions to Reduce Response Time
• See Something, Say Something
• EULA