eBooks/eGuides

CHAPTER 5 Ten Key Ransomware Defense Takeaways 43 These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. Leverage Cloud-Based, Real-Time Threat Intelligence Ransomware and other cybersecurity threats are evolving rapidly. Zero-day attacks represent the greatest threat to most organiza- tions. Cloud-based, real-time threat intelligence enables IT teams to deploy the most up-to-date countermeasures as quickly as possible when new threats emerge, and leverage security exper- tise that extends well beyond their organization. Automate Security Actions to Reduce Response Time Wherever possible, security actions should be automated to keep pace with threats that can spread throughout an entire enterprise network within minutes or seconds. Here are some examples of security actions that can be automated: » Distribution and installation of anti-malware and intrusion prevention system (IPS) signature files » Centralized collection, correlation, and analysis of security logs and threat data » Threat protection that blocks requests to malicious destina- tions before a connection is even established and stops threats over any port before they reach your network and endpoints » Dynamic access control lists (ACLs), domain and website whitelisting/blacklisting, and firewall rule creation » Account provisioning/deprovisioning and access rights management See Something, Say Something The U.S. Federal Bureau of Investigation (FBI) is urging ransom- ware victims to report their infection details, which will in turn give the FBI a more comprehensive view of ransomware's spread

• Cover
• Title Page
• Copyright Page
• Table of Contents
• Introduction
• About This Book
• Foolish Assumptions
• Icons Used in This Book
• Beyond the Book
• Chapter 1 What Is Ransomware?
• Defining Ransomware
• Recognizing Ransomware in the Modern Threat Landscape
• Understanding How Ransomware Operates
• Chapter 2 Implementing Best Practices to Reduce Ransomware Risks
• Before an Attack: Discover, Enforce, Harden
• During an Attack: Detect, Block, and Defend
• After an Attack: Scope, Contain, and Remediate
• Chapter 3 Building the "New Best-of-Breed" Security Architecture
• Recognizing the Limitations of Current Security Designs
• Defining the "New Best-of-Breed" Security Architecture
• Chapter 4 Deploying Cisco Ransomware Defense
• Leveraging DNS as the First Line of Defense in the Cloud
• Securing Endpoints and Addressing Email Threats
• Cisco Advanced Malware Protection (AMP) for Endpoints
• Cisco Email Security with Advanced Malware Protection (AMP)
• Protecting the Network with Next-Generation Firewalls and Segmentation
• Cisco Firepower Next-Generation Firewall (NGFW)
• Use the network as a sensor and enforcer
• Streamlining Deployments and Bolstering Incident Response
• Chapter 5 Ten Key Ransomware Defense Takeaways
• Ransomware Is Evolving
• Ransomware-as-a-Service Is an Emerging Threat
• Paying a Ransom Doesn't Solve Your Security Problems
• Build a Layered Security Architecture Based on Open Standards
• Deploy Integrated, Best-of-Breed Solutions
• Embed Security throughout Your Network Environment
• Reduce Complexity in Your Security Environment
• Leverage Cloud-Based, Real-Time Threat Intelligence
• Automate Security Actions to Reduce Response Time
• See Something, Say Something
• EULA