The aftermath of a crypto-ransomware attack at a large academic institution
summary
End of 2016 a large North American university refuses a $38,000 ransom after ransomware encrypts many campus Windows machines; 56 of 150 survey respondents report their work computer infected, researchers collect 150 survey responses and 30 interviews within six weeks, and most people lose more than three days (often weeks) of productivity. Communication failures and opaque decisions drive fear and resentment. Recommended operational steps include share the plan, communication is key, and give victims a voice plus usable backups and user-centric training.
AI-written summary · about
chapters (23)
- 0:00Introduction
- 0:32Background
- 2:40Survey
- 3:24Interviews
- 4:23Technology disruptions
- 4:38Days of productivity
- 5:35Emergency measures
- 6:24Horror
- 7:03Recovery
- 7:37Personal Social Impact
- 9:16Resentment
- 9:45Risk Perception
- 10:57Communication
- 12:17Life return to normal
- 12:49What have we learned
- 13:09Share the plan
- 13:54Communication is key
- 14:43Give victims of voice
- 15:30Usercentric security
- 16:28Usercentric training
- 17:36Usercentric data storage
- 18:23Conclusion
- 19:12Questions
related talks
21mRansomware Attack: Lessons Learned
20mWhen ransomware strikes
40mA Review of the Ransomware Threat Landscape
22m"I was told to buy a software or lose my computer. I ignored it": A study
37mRansomware Stages of Grief
41mRansomware Incident Response - The Real-World Story of a Ransomware Attack
32mSurviving a Ransomware Attack - Lessons from the Field
54mExperience a simulated ransomware event: Learn now to prevail later