To pinpoint ransomware attacks earlier, Commvault is integrating its decoy security technology into Metallic, the vendor’s SaaS backup and recovery product.
In February 2022, Commvault acquired TrapX, an Israel-based security company that created lures and decoys that looked like normal applications and data. This early threat detection technology has been adapted into Metallic SaaS as the ThreatWise add-on.
ThreatWise is available now, with prices that vary depending on the level of protection purchased.
Ransomware is not going to go away, according to Christophe Bertrand, senior analyst at Enterprise Strategy Group (ESG), a division of TechTarget. The battle against ransomware is a team effort, and companies need several different technologies to combat it, including in the realms of prevention and detection.
“[ThreatWise] is one type of technology that can fight ransomware and put organizations in a position where they can recover,” Bertrand said.
Hunting with decoys
Other data protection companies have been using AI and machine learning (ML) for anomaly detection for some time, including Commvault, according to David Ngo, CTO of Metallic at Commvault.
Ransomware can take days or months to detonate after infiltrating a system. It tries to evade notice once it has breached a customer’s environment, Ngo said. ThreatWise helps to discover it by laying a trap.
Adversaries can’t tell [ThreatWise is] there, so when they poke at a decoy, it is a clear and undisputable sign that an organization is experiencing a cyber attack. Jon OltsikSenior analyst, Enterprise Strategy Group
“Touching an asset here is like touching a tripwire,” Ngo said. “The action triggers the detection, rather than types of patterns triggering the detection.”
This SaaS-delivered deception technology for data protection is unique to Metallic, he said. Several vendors use AI and ML to detect anomalous patterns in behavior, while ThreatWise uses decoys to discover live attacks.
Deception technology like decoys is incredibly useful in detection, according to Jon Oltsik, senior analyst at ESG.
“Adversaries can’t tell it’s there, so when they poke at a decoy, it is a clear and…
https://spinsafe.com/wp-content/uploads/2022/09/ransom_g1259800910.jpg4001200SecureTechhttps://spinsafe.com/wp-content/uploads/2024/01/SS-Logo.svgSecureTech2022-09-23 01:00:112022-09-23 01:00:11Commvault Metallic tricks ransomware to protect data
Commvault has announced the general availability of Metallic ThreatWise, an early warning system that proactively surfaces unknown and zero-day threats to minimise compromised data and business impact.
According to Enterprise Strategy Group, only 12% of the IT directors surveyed indicated confidence in having the proper tools and necessary location agnostic protection to secure data equally across on-premises and cloud.
With ThreatWise, Commvault is further defining data security with an early warning that no other vendor in this space provides. It uses decoys to proactively bait bad actors into engaging fake resources, spot threats in production environments, and arm businesses with tools to keep data safe. Simultaneously, Commvault is also extending its machine learning and critical threat detection and security capabilities to its broader platform.
“In surveying enterprise IT directors with direct knowledge and influence on their company’s data security strategies, the results we found were eye opening,” says Jon Oltsik, Senior Principal Analyst and Fellow, Enterprise Strategy Group.
“It is very clear that many IT teams do not have adequate tools in place to detect ransomware attacks on production environments early enough in the attack chain to neutralise stealthy cyber-attacks before they cause harm,” he says.
“Ransomware has revolved around encryption for a long time, but newer extortion techniques like exfiltration go beyond rapidly spreading malware, and data recovery alone cannot help if sensitive business data is leaked to the Dark Web.”
Ranga Rajagopalan, Senior Vice President, Products, Commvault, says data recovery is important, but alone its not enough.
“Just a few hours with an undetected bad actor in your systems can be catastrophic,” he says.
“By integrating ThreatWise into the Metallic SaaS portfolio, we provide customers with a proactive, early warning system that bolsters their zero-loss strategy by intercepting a threat before it impacts your business.”
Metallic ThreatWise, along with Commvaults latest platform update features are available now.
last month, Gartner named Commvault as a Leader in its 2022 Gartner Magic…
Commvault has announced new ransomware services designed to help businesses prepare for, protect against, and respond to ransomware. The new offering is called Commvault Ransomware Protection and Response Services and provides the resources and expertise needed to harden customers’ Commvault solutions from an attack, review the state of their data protection solution over time, and help them recover critical data when an attack does occur.
Commvault Ransomware Protection and Response Services includes two specific areas@
The Ransomware Protection Design and Plan service assists customers in validating their preparedness for ongoing threats and attacks. The offering will help organizations understand potential threats and risks impacting their ability to be ready. It offers tangible outcomes such as a readiness scorecard, key findings, and recommendations and a prioritised action plan.
The Commvault Ransomware Response Service provides the expertise and resources to help recover from an attack. As part of the service, Commvault provides a Ransomware Recovery Incident Manager backed by the Commvault Recovery Operations team. The service works with customers to identify and recover critical data and expedite a return to normal business operations.
These services complement Commvault Ransomware Protect and Recover solutions that deliver the critical capabilities for ransomware data protection.
https://spinsafe.com/wp-content/uploads/2020/11/fblogo.jpg6281200SecureTechhttps://spinsafe.com/wp-content/uploads/2024/01/SS-Logo.svgSecureTech2021-09-14 07:30:042021-09-14 07:30:04Commvault adds new ransomware protection and response services
