Ransomware is the number one threat to an organization's data. These malware programs infiltrate an organization and encrypt every file they can access. The only way to unencrypt the data is pay a fee to the malware creator. Hence the title ransomware. Studies indicate that malware infected as many as 70 percent of businesses just this year! The problem is most of the recommended ransomware protection strategies are not able to protect an organization from this type of attack. In this on demand webinar listen as experts from Storage Switzerland and Nexsan discuss the five reasons you are not as protected from a ransomware attack as you think you are. More importantly learn how to create rock solid protection from any kind of ransomware attack.

1. In this webinar you will learn:
● Understand how Ransomware is Getting Worse
● Backups and Snapshots Are No Longer Enough
● 3 Things You Can Do to Protect Yourself
Ransomware
Five Reasons You’re Not As Protected As You Think
On Demand Webinar
For audio playback and Q&A go to:
http://bit.ly/Ransom5

2. ● Analyst firm focused on storage, cloud
and virtualization
● Knowledge of these markets is gained
through product testing and interaction
with end users and suppliers
● The results of this research can be
found in the articles, videos, webinars,
product analysis and case studies on
our web site:
http://storageswiss.com
Who Is Storage Switzerland?

3. Our Speakers
George Crump is the founder of Storage
Switzerland, the leading storage analyst focused on
the subjects of big data, solid state storage,
virtualization, cloud computing and data protection.
He is widely recognized for his articles, white papers,
and videos on such current approaches as all-flash
arrays, deduplication, SSDs, software-defined
storage, backup appliances, and storage networking.
He has over 25 years of experience designing
storage solutions for data centers across the US.

4. Our Speakers
Gary Watson co-founded Nexsan in 1999 and served as
Chief Technology Officer until the company was acquired
in 2013. In 2014, Mr. Watson was given the title Imation
Fellow in recognition of his service. Now, he is the Vice
President of Technical Engagement for Nexsan and was
described in a recent interview as “one of those brilliant
technical people who also possesses the gift to
communicate eloquently, enthusiastically and informatively
with any audience.” Prior to Nexsan, Mr. Watson held
engineering and management positions at Trimm
Technologies, Data General and Digital Equipment
Corporation minicomputers. He studied Physics at Harvey
Mudd College in Claremont, California.

5. 4 ©2016 Nexsan. All Rights Reserved.
Imation | Nexsan Company Overview
Imation – Parent Company
• Holding Company
• Divested from legacy businesses
Nexsan - Trading Company
▪ Founded in 1999
▪ Pioneered capacity-optimized storage
▪ A history of technological innovation
▪ Over 40,000 systems installed
▪ Over 20,000 end-users, 60 countries
▪ Six major facilities: Campbell,
Thousand Oaks, Escondido CA;
Montreal Canada; Derby, East Isley
UK

6. What Is Ransomware?
• Malware that, once
triggered, encrypts data
• For the most part the only
way to un-encrypt is to pay
encryptor
• Key target is unstructured
data and now databases

7. The State Of Ransomware
• Over 80% of businesses
have been infected at
least once this year
• Over 40% have paid the
ransom
• Typical ransoms range
from $2,000 to $15,000

8. Why Is Ransomware So
Effective?
• Thrives on
• Weaknesses in organization’s data protection strategies
• Weaknesses in end-user training
• Ransom $ is low
• Cheaper than recovering data
• Because the data protection process is too complex
• Organizations have a False Sense of Security

9. Reason 1: Backups Aren’t Frequent
Enough
• Ransomware attacks occur during the day
• Hours after backups have been completed
• The most valuable data, the data that is being
created or modified on THAT day, is also the
day you are most likely to pay to encrypt
• Some Ransomware has specifically targeted
backup files first

10. Reason 2: Backup Devices Aren’t
Safe
• Most Disk Backup Appliances are network
mounts
• Backups are stored as files on the appliance
• Ransomware can encrypt those files just like
any other
• Some Ransomware has specifically targeted
popular disk backup appliances

11. Reason 3: Snapshots Aren’t Safe
• Snapshots CAN be taken more frequently
• Still may not be frequent enough
• May impact production storage performance
• Require more storage capacity
• Most snapshots are easily mountable
• Some Ransomware specifically targets
snapshots

12. Reason 4: Users Can Only Be
Trained So Far
• What can be done (what should we
train them on)
• But Ransomware emails are getting
more creative

13. Reason 5: Ransomware Is Getting
MORE Sophisticated
• Targeting specific devices
• No longer aimlessly walks
the file system
• Encrypts high value data
(database)

14. The Ransomware Solution
• Real-time data protection
• Protected data stored as “Read-
Only”
• Cost effective storage platform
• multi-purpose, solves more problems
than Ransomware

15. 14 ©2016 Nexsan. All Rights Reserved.
Assureon provides…
▪ Long term archive storage for fixed content files
▪ Guaranteed file availability
▪ Guaranteed file integrity
▪ Assureon doesn’t have a “delete” key – files are
removed only pursuant to defined Retention Rules.
▪ Some or all Rules may be configured such that even
the administrator can’t change them, or can only
change them after a specified period of time.
▪ The inability of even admin-level people or systems to
directly modify or delete a file makes Assureon very
resistant to viruses and ransomware.

16. 15 ©2016 Nexsan. All Rights Reserved.
▪ A unique “fingerprint” representing
the content of each file is generated
upon ingestion
▪ Every 90 days the integrity of every
file is audited against the original
“fingerprint”
▪ Guarantees file level integrity within
the archive
▪ Guarantees that a file has not been
changed (authenticity)
▪ Reports any data corruption
▪ Self healing if corruption is found
▪ Provides an audit of file integrity
Guaranteed File Integrity – Fingerprint Audit

17. 16 ©2016 Nexsan. All Rights Reserved.
▪ Files entering the Assureon Archive are given a
unique sequential serial number – an “asset tag”
▪ Every 90 days every file is checked to make sure
it is in the archive
▶ Performed at both the primary site and the secondary site
▪ Ensures all files are present in the Assureon
archive
▪ Reports any missing data
▪ Automatically heals missing files
▪ Provides an audit of file availability
▪ Unique to Assureon
Guaranteed File Availability - Serialization Audit
1
2
3
4
6
7
Missing

18. 17 ©2016 Nexsan. All Rights Reserved.
Enhanced Data Privacy
▪ Audit Logs stored securely.
▪ Tamper Proof – files and
metadata are
cryptographically chained
together (US Patent
7,801,871 et al)
▪ Encryption at Rest with
unique key per file.
▪ Separation of Data –
physically and or logically.
Encryption + Authentication + Audit
Logging =
Proper Chain of Custody

19. Thank you!
Storage Switzerland
http://www.storageswiss.com
georgeacrump@storageswiss.com
StorageSwiss on Twitter:
http://twitter.com/storageswiss
StorageSwiss on YouTube:
http://www.youtube.com/user/storageswiss
Nexsan
https://www.nexsan.com
Nexsan on Twitter:
https://twitter.com/Nexsan
Nexsan on LinkedIn:
https://www.linkedin.com/company/nexsan
Nexsan on Facebook:
https://www.facebook.com/Nexsan

20. Ransomware
Five Reasons You’re Not As Protected As You Think
For Complete Audio and Q&A please register
for the On-Demand Version at
http://bit.ly/Ransom5