Cyber Defense eMagazine February 2021 Edition

More documents

Recommendations

Info

But protecting against a high-impact, low-probability event is difficult in practice. Backups may not work effectively or quickly enough in the event of a real threat. Many systems are not ready to restore large environments in a short timeframe. Failed backups, corrupted data, and slow restores hurt agencies even more. Evolving ransomware attacks that target backup data, backup catalogs, and even storage array snapshots force agencies to go through the reconfiguration of backup solutions before even recovering the data. Federal IT leaders should consider a data strategy with security built-in. Ransomware attacks place immense strain on existing data-protection infrastructure if it’s built on legacy architectures like disk and tape. Conventional security measures can safeguard agency data from natural or human-made disasters, data corruption, or accidental deletions, but provide less protection against ransomware. A ransomware attack is not a normal recovery event that might involve a few lost files or a corrupted database; potentially all files and databases could be encrypted. The same design that optimizes for data ingestion and spaceefficiency creates significant drag on recovery speed because data needs to be reconstructed after being widely dispersed through deduplication. A modern data platform with protection for backups built-in is essential. Agencies must evaluate their backup and recovery measures to ensure they’re sufficient. Data backups are often the last line of defense against ransomware attacks. Focusing on recovery performance helps avoid system downtime, and ultimately works to prevent a threat to mission-critical work, or a lapse in essential citizen services. Two metrics are key here: reliability and speed of backup. Backups should not require constant care and feeding, and they should also be simple and immutable. In this case, immutability ensures backups aren’t compromised by attackers even if admin credentials have been compromised. Advanced protection can also come in the form of automated snapshots that prevent backups from being deleted. We also must evolve our expectations around backup and restore speeds. Backup storage must recover as fast as possible. It also must be done at scale – a single database might require 10 hours to restore. When you consider the massive amount of data housed within an agency, you are measuring recovery time in months. Federal agencies doing mission-critical work cannot afford that amount of downtime. Rapid restore is essential if agencies are to protect themselves against the effects of ransomware attacks. Recovery point and recovery time objectives ensure that they can avoid major operational and financial impact, protect critical data, and stay focused on the mission. Rapid backup and recovery are essential – with a Modern Data Experience as the foundation. A Modern Data Experience is simple. Storage should be easy to set up, manage, and expand, as well as integrate easily with existing backup software. Of course, it must be fast – restoring data and applications quickly enough to actually matter. It should also be seamless. This experience can span any protocol, any tier of service level, and multiple clouds in a single environment. Lastly, it should sustain performance as data volumes increase. Having consistent, real-time access to data is critical for agencies – and in the event of an attack, they must be able to recover data at scale, as quickly as possible, when systems go down. The backups themselves must be both valid and usable. Modern data protection is fast, simple, and cost-effective. This strategy helps prevent the devastating effects of cyberattacks that could reduce productivity, cost millions, threaten mission-critical work, or create a lapse in essential citizen services. Cyber Defense eMagazine – February 2021 Edition 66 Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.
About the Author Nick Psaki is the Principal Engineer, Americas – Federal for Pure Storage and based in the Washington, DC area. Nick is Pure Storage’s senior technical resource for Federal customers, providing deep technical knowledge of flash storage system architectures that enable business and technological transformation for government enterprises. A 30-year veteran of the United States Army, Nick has extensive experience in designing, developing, deploying and operating information systems for data analysis, sensor integration and largescale server virtualization. He was the Intelligence Architectures Chief for the Army G2 (Intelligence), and the Technology and Integration Director for Army G2 Futures directorate. He has served in multiple peacekeeping and combat operations ranging from the Balkans in the 1990’s (Operation Able Sentry VI and Operation Joint Endeavor/Joint Guard) to Iraq and Afghanistan in the post-9/11 era. For the past several years, Nick has been focused on ways in which new and emerging technologies can enable more rapid and cost-efficient analysis of ever-growing bodies of data. Nick can be reached at nick.psaki@purestorage.com and at our company website: https://www.purestorage.com/solutions/industries/government.html Cyber Defense eMagazine – February 2021 Edition 67 Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.
Page 1 and 2:
The 2021 Perspective - Challenges a
Page 3 and 4:
Does Sunburst Have Your Confidentia
Page 5 and 6:
@CYBERDEFENSEMAG InfoSec Knowledge
Page 7 and 8:
Cyber Defense eMagazine - February
Page 9 and 10:
Page 11 and 12:
Page 13 and 14:
Page 15 and 16: Cyber Defense eMagazine - February
Page 21 and 22: The 2021 Perspective - Challenges a
Page 23 and 24: A slice of the anti-virus pie? We s
Page 25 and 26: Additionally, we saw explosive grow
Page 27 and 28: 2021 Predictions: Addressing the Ch
Page 29 and 30: About the Author Ankur is the found
Page 31 and 32: An independent study conducted by P
Page 35 and 36: The Boomers’ lack of trust in Fac
Page 37 and 38: While it’s unclear if historical
Page 39 and 40: Cyberattacks On K-12 Education Care
Page 41 and 42: About the Author Saryu Nayyar is th
Page 43 and 44: Third-party vendor risk management
Page 45 and 46: Cyber Resiliency Will Become the Ne
Page 47 and 48: About the Author Drew Daniels is th
Page 49 and 50: Phishing Threat actors are taking a
Page 51 and 52: Vulnerability Patching: Why Does It
Page 53 and 54: with any degree of efficiency is to
Page 55 and 56: the nature and its technological ou
Page 57 and 58: kind of the communication streaming
Page 59 and 60: it’s logical to realize that the
Page 61 and 62: eason they will be that hidden part
Page 63 and 64: channeling hotspots are diverse and
Page 65: Ransomware is Evolving - Agencies M
Page 69 and 70: 3GPP Release 15 defines the 5G secu
Page 71 and 72: • Suppliers must prioritize cyber
Page 73 and 74: Does Sunburst Have Your Confidentia
Page 75 and 76: About the Author Randy Reiter is th
Page 77 and 78: Global Reach and Accessibility Plan
Page 79 and 80: About the Author Trevor Daughney is
Page 81 and 82: typical work environment. Public Wi
Page 83 and 84: increasingly interested in implemen
Page 85 and 86: Approach cybersecurity as an org-wi
Page 87 and 88: Are Encrypted Communication Apps us
Page 89 and 90: How SaltDNA’s platform prevents c
Page 91 and 92: are turning to new technologies lik
Page 93 and 94: The Best Network Protection: Go Dee
Page 95 and 96: Top Tips For Securing Your DevOps E
Page 97 and 98: Continual Learning Is Necessary The
Page 99 and 100: a prime target for cyber attacks. I
Page 105 and 106: FREE MONTHLY CYBER DEFENSE EMAGAZIN
show all

Cyber Defense eMagazine February 2021 Edition

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?