Defeating Ransomware Attacks
summary
Claims that security chaos engineering turns backups and runbooks into testable hypotheses by injecting faults and running game days against cloud stacks. Shows a concrete AWS scenario: create a user, compromise an EKS pod, encrypt an S3 bucket, and measure whether AWS GuardDuty, Security Hub, AWS Config and Access Analyzer alert and whether backups and runbooks restore data. Cites 148% ransomware spike (SonicWall), 79% of incident responses involving ransomware, and 2,084 FBI complaints H1 2021.
AI-written summary · about
chapters (10)
- 0:00Defeating ransomware intro
- 1:05What is ransomware
- 8:31Ransomware attack chain
- 12:43Ransomware in cloud
- 19:26Security chaos engineering
- 22:16Bucket ransomware example
- 28:33Running chaos experiments
- 31:01Verifying runbooks
- 32:50Security chaos resources
- 33:33Summary
related talks
38mRansomware and Backups: A Multi-Layered Defense Strategy
30mAnti-ransomware strategies on the cloud
51mHow to secure your data and applications against ransomware
29mDesign secure protection environments with Veeam and AWS
41mMore Than Backups and Hope
50mRansomware Readiness: Backup and Recovery in the Cloud
50mProtegiendo sus datos en la nube de AWS ante un evento de ransomware
22mNavigating a cybersecurity event in real time