Story image

Three effective strategies for protecting your backups from ransomware

25 Jun 2018

Article by Altaro technical evangelist Andy Syrewicze

According to a 2018 Ponemon Institute study, the occurrence of ransomware attacks is projected to continue increasing over the next three years.

Are you prepared?

How do you prepare yourself for increasing amounts of ransomware?

Being the attack vector for ransomware is often the human aspect of any organisation.

It’s not really a matter of if you’ll be infected by ransomware, but when.

With that in mind, what are you left with in the event of an attack? Backups.

Backups are your ace-in-the-hole for any ransomware attack.

It doesn’t matter how bad you’re infected.

If you’re able to successfully recover data from an untainted backup, you’ll win the ransomware game every time.

Sadly, it’s not enough to just have backups running.

You must have them running in a way that hardens them from ransomware as well.

Here are the three key things you should be doing with your data protection strategy to make sure your backups are there when you need them most. 

Compartmentalised backup storage

In the days of tape storage, you didn’t really need to worry about this.

Tapes not actively being written to are on a shelf somewhere and “offline”.

There was no way for malicious software to tamper with them.

With disk-based backup storage, it takes more effort to protect it.

A key piece of advice I always give customers concerned about ransomware is to make sure they are utilising compartmentalised backup storage.

This means that the location hosting the backup storage should be as separated as possible from the production network.

The easiest way of doing this is through offsite backups.

Offsite locations are often on different network segments, making them unreachable by malicious software from the production site.

Follow just enough access (JEA) best practices

The idea of JEA is that any/all user accounts are only configured with the exact permissions needed to perform their function.

When it comes to backups, this really boils down to 2 things.

  1. The backup storage (Local and Offsite) should only be accessible by a single service account in Active Directory
  2. Said service account should only be used for backup operations and the storage of backups, nothing else.

Regular penetration testing

Sure, maybe your backups are secure today, but what happens 6 months down the road?

Infrastructure and security can change a lot in 6 months.

If you don’t have a tight change control process, the hardened system you had in place at one point in time can become another method for being victimised.

To prevent this from happening, practise regular penetration testing for your backup processes, both technical and social.

This will help ensure that the hard work you put into your backup solution doesn’t go to waste down the road.

Wrap-up

Are you in need of a backup solution to help you with your backup strategy?

Altaro VM Backup can assist you with many of the concepts mentioned here.

Download Altaro VM Backup for free to back up unlimited VMs for 30 days, then enjoy forever free backup for 2 VMs.

Google doubles down on hybrid cloud strategy
CSP is a platform that aims to simplify building, running, and managing services both on-premise and in the cloud.
In ongoing cloud war, Google to acquire data migration specialist
Google is currently behind AWS and Microsoft in the cloud battle, and it would seem this play is an attempt to claw some ground back.
Interview: CyrusOne’s new Europe president on aggressive expansion
In this exclusive interview Tesh Durvasula shares how the company plans to have a Europe data centre portfolio providing nearly 250 MW by the year’s end.
Enterprise cloud deployments being exploited by cybercriminals
A new report has revealed a concerning number of enterprises still believe security is the responsibility of the cloud service provider.
Pure Storage expands enterprise data management solutions
It has integrated StorReduce technologies for a cloud-native back up platform, and expanded its data fabric solution for cloud-based applications.
HPE launches new real-time processing edge platform
The platform is said to help communication service providers (CSPs) to capitalize on data-intensive, low-latency services for media delivery, connected mobility, and smart cities.
‘Digital twins’ entering mainstream use sooner than expected
The term ‘digital twin’ may sound foreign to some, but Gartner says it is rapidly becoming established among modern organisations.
Infinera launches new ‘disruptive’ network architecture
The new end-to-end network architecture is said to enable instantly scalable, self-optimizing networks that adapt to the demands of specific users and applications.