Countering ransomware with HPE data protection solutions

Size: px

Start display at page:

Download "Countering ransomware with HPE data protection solutions"

Reginald Hubbard
5 years ago
Views:

1 Countering ransomware with HPE data protection solutions

accessing their system by: Locking the system s screen

Ransom prices and payment Most common payment is

Paying ransom does not always unlock files Infection

when users visit malicious sites or links Spammed

2 What is ransomware? Definition Malware that prevents or limits users from accessing their system by: Locking the system s screen Encrypting files and demanding payment to provide key Ransom prices and payment Most common payment is bitcoins itunes and Amazon gift cards are also used Paying ransom does not always unlock files Infection and behavior Ransomware is downloaded onto systems when users visit malicious sites or links Spammed s Downloaded through malvertisements Dropped by exploit kits onto vulnerable systems Source: Trend Micro 2

Most common forms of ransomware CryptoLocker uses

CryptoWall uses asymmetric encryption, where the

Locky attacks Windows files TorrentLocker scans the

leaving ransom instructions to the victim Virlock is a

3 Most common forms of ransomware CryptoLocker uses attachments to encrypt certain types of files CryptoWall uses asymmetric encryption, where the decryption key is different from the encryption key Locky attacks Windows files TorrentLocker scans the system for programs and files and conceals the data, leaving ransom instructions to the victim Virlock is a self-reproducing ransomware and a shapeshifter that locks victims screens 3

Ransomware attacks are on the rise Are you protected against them?

No industry is immune At least 15% of businesses in the top 10 industry sectors

infected* Restoring data is not guaranteed Despite paying the ransom, one in five

4 Ransomware attacks are on the rise Are you protected against them? Ransomware attacks are frequent A company is hit by ransomware every 40 seconds* No industry is immune At least 15% of businesses in the top 10 industry sectors have been attacked* Rate of infection is high 71% of companies targeted have been infected* Restoring data is not guaranteed Despite paying the ransom, one in five businesses never get back their files* *Must-Know Ransomware Statistics Barkly, June

5 The cost of ransomware attacks Not only financial hits, but also IT setbacks and damaged company brand 5

Secure backups and fast restores are critical in countering ransomware attacks I need my backups to be protected against ransomware I want the option of copying my backups to the cloud I need to

6 Secure backups and fast restores are critical in countering ransomware attacks I need my backups to be protected against ransomware I want the option of copying my backups to the cloud I need to recover quickly from my backups to meet my stringent RPO and RTO I want to continue using my backup software with the solution that counters ransomware attacks I need a data protection solution that is easy to administer and manage The data protection solution for ransomware needs to integrate into my native database backup tools 6

7 How to avoid ransomware attacks 1 Keep all software up to date 2 Perform a threat analysis with your security team a. Complete penetration testing to find vulnerabilities 3 Train staff on cyber security practices a. Tell staff not to open attachments or links from unknown sources b. Inform employees if a virus reaches the company network 4 Back up all information every day 5 Back up all information to a secure, off-site location Source: How to avoid ransomware attacks: 10 tips. TechRepublic, 27 July

8 Snapshots and replication are not enough to protect you against ransomware Failures and business contingencies File loss File corruption Hardware platform failure Data center outage and power failure Malware and ransomware Retention compliance Primary storage Snapshots* System replication or primary storage replication Secondary storage Disk backup Tape and cloud archive *Only for recent file loss or file corruption 8

The 3-2-1 rule for best practice data protection Protecting data against any failure.

media, one copy off-site First copy on primary storage Second copy on disk backup appliance Third

9 The rule for best practice data protection Protecting data against any failure...wherever it lives best practice: Three copies of data, two copies on two different types of media, one copy off-site First copy on primary storage Second copy on disk backup appliance Third copy on another disk backup appliance, Optional: Copy to tape (archive and compliance) or cloud On-premises Off-site 9

10 HPE solution overview for data protection against ransomware rule On-premises Have three copies of data Store on two different media types Keep one copy off-site Private Public 3 1 VM VM Hypervisor VM HPE RMC On-premises HPE StoreOnce Catalyst (Integrates with backup and recovery software as well as native database data protection tools) HPE Cloud Bank Storage for StoreOnce HPE StoreOnce On-premises HPE 3PAR snapshots Services HPE Pointnext and partners Consulting, support, and education HPE Financial Services Flexible capacity and technology refresh 10

11 Secure, fast, and simple data protection to counter ransomware attacks HPE StoreOnce with HPE StoreOnce Catalyst Save backup capacity with federated deduplication Eliminate failed backups through failover with autonomic restart Block unauthorized access with data encryption Integrate with native database backups tools and thirdparty backup software HPE Recovery Manager Central Restore 15x faster* by using multiple block-based streams and sending only changed data blocks to HPE StoreOnce Simplify data protection tasks with the HPE 3PAR StoreServ Management Console HPE Cloud Bank Storage Copy backup stores to lower-cost object storage Pick your choice of cloud service providers *Compared to traditional approaches 11

$repositories VM VM VM VM Hypervisor Local disk E:\Backup>dir Volume in drive C is Veeam Volume Serial Number is 6AE5-29 Directory of E:\Backup 2016-07-27 16:04 <DIR>.$

12 HPE StoreOnce Catalyst denies access to backups Example: Veeam backup and recovery software Benefit: Your backup repository is protected against viruses Production virtual infrastructure Backup repositories VM VM VM VM Hypervisor Local disk E:\Backup>dir Volume in drive C is Veeam Volume Serial Number is 6AE5-29 Directory of E:\Backup :04 <DIR> :04 <DIR> :05 <DIR> Job-Oracle :19 <DIR> Job-SQL :19 <DIR> VeeamConfigBackup 0 File(s) 0 bytes 4 Dir(s) 17,381,437,440 bytes free Oracle.VM.vbk SQL.VM.vbk DC.VM.vbk All restore points are lost! Veeam server Veeam proxy Windows Server Veeam gateway NAS share \\NAS\Backup Oracle.VM.vbk SQL.VM.vbk DC.VM.vbk All restore points are lost! StoreOnce Access is denied to virus repository is visible only using Catalyst API Oracle.VM.vbk SQL.VM.vbk DC.VM.vbk All All restore points are HEALTHY!! 12

13 RMC restores data quickly to meet stringent RPOs and RTOs Recover at the speed of flash by only sending unique changed data from StoreOnce to 3PAR 15x faster restore* Deliver on SLAs with 15x faster recovery* than traditional backup applications Reduce cost and complexity of traditional recovery approaches with direct restore from 3PAR to StoreOnce *Compared to traditional server-based backup environments RMC reads only the backup differentials from StoreOnce and moves only the changed blocks from StoreOnce to a target snapshot on 3PAR 13

14 HPE RMC 5.0 and HPE Cloud Bank Storage Optional cloud backup Economic Low-cost, scalable, long-term retention Efficient Ability to send, store, and retrieve only unique data for lower TCO Flexible Automated, native tiering of backup data to the cloud platform of your choice Retain 100 PB 1 + data from $0.001/GB/month 2 Secure Simple, encrypted, and reliable cloud disaster recovery 1 Assuming dedupe ratio of 20:1 and the maximum logical capacity of StoreOnce 6600 of 34 PB 2 Assuming dedupe ratio of 20:1 and AWS (S3) standard object storage pricing of $0.02 per GB per month 14

RMC integrates with HPE 3PAR SSMC RMC and HPE 3PAR StoreServ

for volume provisioning and data protection Simple to protect Set it

Intelligent dashboard provides health, performance, and capacity at a

15 RMC integrates with HPE 3PAR SSMC RMC and HPE 3PAR StoreServ Management Console integration Simple to deploy Single pane of glass for volume provisioning and data protection Simple to protect Set it and forget it with preconfigured protection policies Simple to manage Intelligent dashboard provides health, performance, and capacity at a glance End-to-end data protection managed through one simple console (3PAR SSMC) 15

16 StoreOnce Catalyst and RMC integrate with applications and backup software Backup ISVs App plug-in Snap and Express Protect HPE Data Protector Veritas NetBackup Veritas Backup Exec BridgeHead Veeam Software Backup & Replication Oracle RMAN Microsoft SQL SAP HANA VMware Any* Microsoft SQL File Persona* Oracle SAP HANA Microsoft Exchange Application server Catalyst Catalyst Catalyst Catalyst Media server/ agent Catalyst OST OST Catalyst Catalyst Primary arrays RMC 3PAR Catalyst *Crash consistent StoreOnce Catalyst StoreOnce / VSA in Microsoft Azure 16

efficiency and reliability Generates a detailed report including: Current backup capacity and performance Key performance

17 HPE NinjaProtected+ backup assessment Delivering a free, simple, complete health check for your data protection environment Provides a free, secure, noninvasive backup storage assessment Ensures your backup environment is operating with optimal efficiency and reliability Generates a detailed report including: Current backup capacity and performance Key performance indicators such as backup windows Backup success rates Opportunities for cost reduction NinjaProtected+ Data Domain Analyzer 17

Optimize your experience with HPE Pointnext and partner services Assess the existing infrastructure Design and deploy the complete solution Train end users and IT Cost-effective service excellence

18 Optimize your experience with HPE Pointnext and partner services Assess the existing infrastructure Design and deploy the complete solution Train end users and IT Cost-effective service excellence delivered globally and HPE Datacenter Care to ensure success Assigned local account team and enhanced global call experience Reactive and proactive support services Optional building blocks including optimization and prevention, hybrid cloud support, and so on 18

Protection and rapid recovery of your data when ransomware attacks Secure backup stores to block unauthorized access Simplify data protection management and deployment with one console Accelerate

19 Protection and rapid recovery of your data when ransomware attacks Secure backup stores to block unauthorized access Simplify data protection management and deployment with one console Accelerate restores with flashintegrated data protection to meet stringent RPOs and RTOs Lower cost by copying backup stores to the cloud Remove complexity with application- and backup softwareintegrated protection Optimize business value with design, implementation, and support expertise 19

Data protection to counter ransomware by the numbers How HPE helps customers 15x faster recovery 1 9x lower CPU consumption 1 20x reduction in backup storage

20 Data protection to counter ransomware by the numbers How HPE helps customers 15x faster recovery 1 9x lower CPU consumption 1 20x reduction in backup storage required 2 1 Based on HPE testing comparison between HPE Recovery Manager Central and traditional backup environments 2 Compared to a fully hydrated backup 20

faster restore* StoreOnce with Catalyst apps using VSS Minimal application impact Management integration RMC

21 Why HPE for countering ransomware? Secure Simple Fast Operating system Secondary storage ISV and app integrations RMC and StoreOnce Catalyst 15x faster restore* StoreOnce with Catalyst apps using VSS Minimal application impact Management integration RMC and 3PAR SSMC 3PAR StoreServ Move to object storage (on-premises or cloud) *Based on HPE testing comparison between HPE Recovery Manager Central and traditional backup environments 21

22 What s next? Find out more Contact your local HPE sales to discuss your needs Find out how HPE can help you counter ransomware attacks Get a data protection assessment with NinjaProtected+ Better understand where you are today, and where you can go tomorrow Visit hpe.com/storage 22

23 Thank you

Your World is Hybrid: Protecting your VMs with Veeam and HPE Storage. Federico Venier HPE Storage Technical marketing

Your World is Hybrid: Protecting your s with and HPE Storage Federico Venier HPE Storage Technical marketing federico.venier@hpe.com HPE & : Integration summary SQL Applications HPE + License Reselling