Ransomware and Backups: A Multi-Layered Defense Strategy
summary
Ransomware targets backup stores and the presentation lays out a concrete multi-layered defense: strengthen NIST 3-2-1 with prevention, detection, analytics and threat hunting; run user-behavior and access-log analysis against backup software; scan backup images with YARA rules and IOC feeds; monitor entropy and dedupe ratios to detect rapid data changes and automatically halt snapshots; keep hourly/daily cadence appropriate to workload; rehearse bulk restores and follow a 30/60/90 checklist. Cited data: 74% rise in ransomware losses (2023) and California shows 41% more breaches year-over-year.
AI-written summary · about
chapters (9)
- 0:00Introduction and setup
- 1:04Why multi-layered defense matters
- 9:14Ransomware landscape and trends
- 11:44Prevention strategies for backups
- 17:05Dormant phase threat hunting
- 25:46Detonation phase detection
- 30:19Recovery phase best practices
- 31:4530-60-90 day recovery checklist
- 32:28Q&A session
related talks
01h 00mProtect your assets: A data protection and cyber resiliency panel
51mHow to secure your data and applications against ransomware
50mRansomware Readiness: Backup and Recovery in the Cloud
14mIs a Ransomware Attack in your Future? How to Prevent an Attack
27mRansomware: A database survival guide
29mPrevention as a Business Strategy
06mA Battle Plan for Disaster Recovery in the Wake of Ransomare
21mRansomware Attack: Lessons Learned