eBooks/eGuides

CHAPTER 5 Ten Key Ransomware Defense Takeaways 39 These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. Ten Key Ransomware Defense Takeaways I n this chapter, I cover some important points about ransom- ware defense that are well worth remembering! Ransomware Is Evolving Ransomware is the fastest-growing malware threat today, and it's rapidly evolving. For example, CryptoWall — one of the most lucrative and far-reaching ransomware campaigns on the Inter- net today — was initially unleashed in 2014 and infected billions of files worldwide. Since that time, three additional variants of CryptoWall have been developed, each more sophisticated than its predecessor. The pace of evolution is also accelerating. In the past three years, the number of unique ransomware campaigns and variants has many times over eclipsed the total ransomware campaigns and variants of the previous 25 years since the first ransomware campaign — PC Cyborg — was launched in 1989. During the first quarter of 2016, Chapter 5 IN THIS CHAPTER » Understanding the challenges of ransomware defense » Building and deploying an inherently secure environment » Keeping it simple » Automating tasks to stay ahead of rapidly evolving threats

• Cover
• Title Page
• Copyright Page
• Table of Contents
• Introduction
• About This Book
• Foolish Assumptions
• Icons Used in This Book
• Beyond the Book
• Chapter 1 What Is Ransomware?
• Defining Ransomware
• Recognizing Ransomware in the Modern Threat Landscape
• Understanding How Ransomware Operates
• Chapter 2 Implementing Best Practices to Reduce Ransomware Risks
• Before an Attack: Discover, Enforce, Harden
• During an Attack: Detect, Block, and Defend
• After an Attack: Scope, Contain, and Remediate
• Chapter 3 Building the "New Best-of-Breed" Security Architecture
• Recognizing the Limitations of Current Security Designs
• Defining the "New Best-of-Breed" Security Architecture
• Chapter 4 Deploying Cisco Ransomware Defense
• Leveraging DNS as the First Line of Defense in the Cloud
• Securing Endpoints and Addressing Email Threats
• Cisco Advanced Malware Protection (AMP) for Endpoints
• Cisco Email Security with Advanced Malware Protection (AMP)
• Protecting the Network with Next-Generation Firewalls and Segmentation
• Cisco Firepower Next-Generation Firewall (NGFW)
• Use the network as a sensor and enforcer
• Streamlining Deployments and Bolstering Incident Response
• Chapter 5 Ten Key Ransomware Defense Takeaways
• Ransomware Is Evolving
• Ransomware-as-a-Service Is an Emerging Threat
• Paying a Ransom Doesn't Solve Your Security Problems
• Build a Layered Security Architecture Based on Open Standards
• Deploy Integrated, Best-of-Breed Solutions
• Embed Security throughout Your Network Environment
• Reduce Complexity in Your Security Environment
• Leverage Cloud-Based, Real-Time Threat Intelligence
• Automate Security Actions to Reduce Response Time
• See Something, Say Something
• EULA