In our tenth edition of the Insider Threat Podcast, we were joined by NetApp Senior Technical Marketing Engineer, Justin Parisi. Justin is making the rounds ahead of the NetApp ONTAP version 9.3 release this week. Of course, we wanted to get the conversation focused on insider threats and other security topics. We managed to do just that. It seems ONTAP has a few good security related tricks up its sleeve in version 9.3. We also talked about a common topic for both STEALTHbits and NetApp – ransomware. Ransomware goes after files through the access people who get infected have granted to them. So it’s a perfect blend of our access governance chocolate with their advanced file protection peanut butter.
Where we here at STEALTHbits have been spending a lot of time coming up with new tricks to combat ransomware, NetApp has had a fairly different approach. One of the first tricks NetApp ever learned was the snapshot. There have always been three moves against ransomware. Avoid it completely (good luck), pay up, or hope you have a good back up. The snapshot is a super charged version of the third option. It’s a read only copy of the data you can make lightning fast and orders of magnitude more often than your backups. It literally can’t be written to at the OS layer so the ransomware is out of luck getting to it. In a world where many cybercriminals are now faking ransomware and you can’t rely on paying to help you like you used to, prevention and these advanced backup strategies are your best bets.
Justin ran through a whole goodie bag of new security features in the upcoming ONTAP 9.3 release as well. Everything from multi-factor authentication to federation, new volume level encryption options and snaplock features, and more. We’re going to give you a bunch of links to follow up and learn more. But what was clear is that NetApp is taking insider threats seriously in this latest release, and we’re happy they are.
Click here to listen to the podcast.
To be notified of Insider Threat Podcast episodes, sign up here
Justin’s blog, Why Is The Internet Broken?: https://whyistheinternetbroken.wordpress.com/
Jonathan Sander is STEALTHbits’ Chief Technology Officer (CTO). As CTO, he is responsible for driving technical innovation, ensuring that STEALTHbits is well positioned in their current and emerging markets, and he will also lead corporate development efforts. Jonathan also plays the role of evangelist at STEALTHbits venues large and small. Prior to STEALTHbits, Jonathan was VP of Product Strategy for Lieberman Software.
As part of Quest Software from 1999 through 2013, he worked with the security and ITSM portfolios. He helped launch Quest’s IAM solutions, directing all business development and product strategy efforts. Previous to that, Mr. Sander was a consultant at Platinum Technology focusing on the security, access control and SSO solutions. He graduated from Fordham University with a degree in Philosophy.
Related Posts
- 2017 Cybersecurity Recap & 2018 Predictions – Insider Threat Podcast #13
- StealthAUDIT 8.1 – Insider Threat Podcast #12
- StealthDEFEND – Insider Threat Podcast #11
- Stealthbits at Microsoft Ignite 2017 – Insider Threat Podcast #8
- The Active Directory Attacks Training Series with Randy Franklin Smith – Insider Threat Podcast #7
- Active Directory Permissions Attacks – Insider Threat Podcast #4
Leave a Reply