Tag Archive for: builtin

This new SSD claims to have built-in AI-powered ransomware protection


What just happened? Data security company Cigent Technology has announced a new line of SSDs that are said to have built-in anti-ransomware technology to protect data from being encrypted by malware. Called the Cigent Secure SSD+, it is said to be the world’s first solid-state drive equipped with baked-in protection against ransomware.

Based in Fort Myers, Florida, Cigent Technology is a cybersecurity firm that protects businesses and individuals from zero-day ransomware and data theft. The company first announced its new ‘self-defending’ SSD in May 2021, claiming its technology can make data invisible if an attack is detected. To do that, the company uses what it calls the Dynamic Data Defense Engine software that uses encryption and offers file-level Zero-Trust access controls.

On the hardware side, the Cigent Secure SSD+ comes with a dedicated AI-powered microprocessor that uses machine learning to monitor disk activity and employs advanced algorithms to thwart ransomware attacks. It has built-in safeguards to prevent the disabling of security controls by malicious software. In case the safeguards are breached and the security controls are disabled, the Secure SSD+ hides all the protected data, making it essentially invisible, and hence inaccessible to attacks. Cigent is also promising to roll out updates to prevent the drive from being cloned, wiped, or accessed if the system is booted from an alternate OS.

The Cigent Secure SSD+ currently only supports Windows, but the company says that support for Linux is ‘coming soon.’ In terms of specifications, the device has an M.2 2280 double-sided form factor and needs to be installed as the boot drive in an endpoint system for it to work as advertised. The rest of the specs, including read/write speeds, are yet to be specified, but it will likely be revealed closer to its launch. The Secure SSD+ will be available for purchase from May 2023 in 480GB, 960GB, and 1920GB capacities.

In addition to the new SSD, Cigent also offers its Data Defense software as a SaaS platform that responds to ransomware attacks with a ‘Shields Up’ status that requires multi-factor authentication to access all protected files. The company…

Source…

Security Firm Unveils SSD With Built-In Ransomware Protection To Safeguard Data


Cigent Technology is a data security company whose main product is the Data Defense software-as-a-service security suite. The company’s about to introduce a new line of SSDs, though, and one of those is pretty interesting: the Cigent Secure SSD+, with automated anti-ransomware technology that claims to be able to protect sensitive data from sneaky malware before it gets encrypted.

How does this work exactly? Well, Cigent says that there’s a microcontroller on the SSD that monitors all traffic going through the controller. It apparently uses machine learning (or “AI”) in some fashion to tell what traffic is normal everyday I/O and what is ransomware. Once it detects ransomware activity, the drive will lock and require multi-factor authentication to access files.

This brings up all kinds of questions, but thankfully, we have answers to a few of them. First of all, this scanning process supposedly has no impact on the performance of the drive because the microcontroller is connected to the SSD controller, and not in the main data path. Also, the technology isn’t infalliable—Cigent admits on the datasheet that it’s possible some data could be modified before the drive locks it.

That’s to say nothing of the still-unreliable nature of most machine learning technologies. In the worst case, having your drive locked until you unlock it isn’t that bad, but it could certainly be a huge problem if there are a lot of false positives. Likewise if the solution doesn’t actually work when it needs to. The Secure SSD+ datasheet says that it has “mature ML algorithms” that “provide protection against newest ransomware,” and also that detection sensitivity can be dynamically tuned, so that’s good, at least.

Still, Cigent says that it’s a much better solution than typical Endpoint Detection and Response (EDR) products because those offerings typically rely on responding after the attack has already occurred, not as it happens. In a statement to The Register, Cigent’s CRO says that the SSD puts attack prevention “as close to the data…

Source…

Next-gen wireless networks could be designed with built-in defenses against ‘metasurface-in-the-middle’ attack — ScienceDaily


Crafty hackers can make a tool to eavesdrop on some 6G wireless signals in as little as five minutes using office paper, an inkjet printer, a metallic foil transfer and a laminator.

The wireless security hack was discovered by engineering researchers from Rice University and Brown University, who will present their findings and demonstrate the attack this week in San Antonio at ACM WiSec 2022, the Association for Computing Machinery’s annual conference on security and privacy in wireless and mobile networks.

“Awareness of a future threat is the first step to counter that threat,” said study co-author Edward Knightly, Rice’s Sheafor-Lindsay Professor of Electrical and Computer Engineering. “The frequencies that are vulnerable to this attack aren’t in use yet, but they are coming and we need to be prepared.”

In the study, Knightly, Brown University engineering Professor Daniel Mittleman and colleagues showed an attacker could easily make a sheet of office paper covered with 2D foil symbols — a metasurface — and use it to redirect part of a 150 gigahertz “pencil beam” transmission between two users.

They dubbed the attack “Metasurface-in-the-Middle” as a nod to both the hacker’s tool and the way it is wielded. Metasurfaces are thin sheets of material with patterned designs that manipulate light or electromagnetic waves. “Man-in-the-middle” is a computer security industry classification for attacks in which an adversary secretly inserts themself between two parties.

The 150 gigahertz frequency is higher than is used in today’s 5G cellular or Wi-Fi networks. But Knightly said wireless carriers are looking to roll out 150 gigahertz and similar frequencies known as terahertz waves or millimeter waves over the next decade.

“Next-generation wireless will use high frequencies and pencil beams to support wide-band applications like virtual reality and autonomous vehicles,” said Knightly, who will present the research with co-author Zhambyl Shaikhanov, a graduate student in his lab.

In the study, the researchers use the names Alice and Bob to refer to the two people whose communications are hacked. The eavesdropper is called Eve.

To mount the attack, Eve first…

Source…

How to protect your PC from ransomware using Windows’ built-in protection


Ransomware — malware that prevents you from accessing your files unless you pay the hacker that infected your computer — has been an issue plaguing computer users and businesses for years. Given its prevalence and the fact that a ransomware infection can lead to the loss of valuable files like documents or family pictures, it’s a good idea to make sure you’re protected. Starting with Windows 10, Microsoft has added features to its built-in Windows Security software that can help keep your computer safe from ransomware.

As far as ransomware is concerned, there are two levels to Windows Security. The first consists of malware scans, which are on by default, and which you can learn more about here. While this will work to keep ransomware from being installed on your computer, if a piece of malware does manage to slip by, the scans won’t be able to protect your files.

The second level is Windows’ ransomware protection, which you have to turn on manually. However, before you do, it is worth noting that this feature is not on by default for a reason. It works by only letting approved apps make changes to your files — which, in theory, prevents ransomware from encrypting them and locking them away. This, however, can cause some problems with apps that aren’t expecting it, so you may have to do some occasional trouble-shooting if you’ve got ransomware protection turned on.

As a result, as we go over how to enable ransomware protection, it’s worth keeping in mind that there will probably be some tinkering involved with this process.

How to turn on ransomware protection

Windows’ built-in ransomware protection is included in its security app. To get to it, either search “Windows Security” from the start menu or go to “Settings”> “Privacy & Security”> “Windows Security.”

Once you’re in Windows Security, go to “Virus & threat protection,” either by clicking the tile or the button in the sidebar on the left.

To turn on ransomware protection, go to “Virus and threat protection” and click “Manage ransomware protection.”

Source…