eBooks/eGuides

34 Ransomware Defense For Dummies, Cisco Special Edition These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. » Outbound message control » Forged email detection » Data loss prevention Protecting the Network with Next- Generation Firewalls and Segmentation Cisco Firepower threat-focused next-generation firewalls (NGFWs) deliver an integrated threat defense across the entire attack continuum — before, during, and after an attack — with unparalleled visibility not possible in legacy port-based firewalls. Cisco TrustSec technology delivers dynamic software-defined network segmentation. It uses the existing network for granular role-based security policies to be enforced on discrete network segments, regardless of the user's location or device. The out- come is simpler segmentation that helps prevent malware from moving laterally within an organization's network; this can limit malware damage once a breach has occurred. Cisco Firepower Next-Generation Firewall (NGFW) Cisco Firepower Next-Generation Firewall (NGFW) with Advanced Malware Protection (AMP) and Threat Grid sandboxing tech- nology blocks known threats and command-and-control (C2) callbacks while providing dynamic analysis for unknown malware and threats. Cisco Firepower provides » Precise application visibility and control (AVC): Identify and control user access to more than 4,000 commercial applications, plus support for custom applications. » Cisco Next-Generation IPS: Highly effective threat preven- tion and a full contextual awareness of users, infrastructure, applications, and content help you detect multi-vector threats and automate defense response. » Reputation- and category-based URL filtering: This filtering provides comprehensive alerting and control over suspect web traffic. It enforces policies on hundreds of millions of URLs in more than 80 categories.

• Cover
• Title Page
• Copyright Page
• Table of Contents
• Introduction
• About This Book
• Foolish Assumptions
• Icons Used in This Book
• Beyond the Book
• Chapter 1 What Is Ransomware?
• Defining Ransomware
• Recognizing Ransomware in the Modern Threat Landscape
• Understanding How Ransomware Operates
• Chapter 2 Implementing Best Practices to Reduce Ransomware Risks
• Before an Attack: Discover, Enforce, Harden
• During an Attack: Detect, Block, and Defend
• After an Attack: Scope, Contain, and Remediate
• Chapter 3 Building the "New Best-of-Breed" Security Architecture
• Recognizing the Limitations of Current Security Designs
• Defining the "New Best-of-Breed" Security Architecture
• Chapter 4 Deploying Cisco Ransomware Defense
• Leveraging DNS as the First Line of Defense in the Cloud
• Securing Endpoints and Addressing Email Threats
• Cisco Advanced Malware Protection (AMP) for Endpoints
• Cisco Email Security with Advanced Malware Protection (AMP)
• Protecting the Network with Next-Generation Firewalls and Segmentation
• Cisco Firepower Next-Generation Firewall (NGFW)
• Use the network as a sensor and enforcer
• Streamlining Deployments and Bolstering Incident Response
• Chapter 5 Ten Key Ransomware Defense Takeaways
• Ransomware Is Evolving
• Ransomware-as-a-Service Is an Emerging Threat
• Paying a Ransom Doesn't Solve Your Security Problems
• Build a Layered Security Architecture Based on Open Standards
• Deploy Integrated, Best-of-Breed Solutions
• Embed Security throughout Your Network Environment
• Reduce Complexity in Your Security Environment
• Leverage Cloud-Based, Real-Time Threat Intelligence
• Automate Security Actions to Reduce Response Time
• See Something, Say Something
• EULA