Ransomware detection and user data access auditing
Securely deliver the right data, services and applications
The importance of security
The threat from ransomware attack is very real. The frequency of ransomware attacks increased 41% in 2019, and an attack is forecast to occur every 11 seconds in 2020. Every attack has the potential to
cost your company business and damage your brand. Furthermore, the average recovery time from an attack is 16 days, and 67% of businesses hit by an attack permanently lost all or part of their data.
Cloud Secure helps protect your data with actionable intelligence on insider threats. It provides centralized visibility and control of all corporate data access across hybrid cloud environments to ensure security and compliance goals are met.
Visibility
Gain centralized visibility and control of user access to your critical corporate data stored on-premise or in the cloud.
Replace tools and manual processes that fail to provide timely and accurate visibility into data access and control. Cloud Secure uniquely operates on both cloud and on-premise storage systems to give you real-time alerts of malicious user behavior.
Protection
Protect organizational data from being misused by malicious or compromised users through advanced machine learning and anomaly detection.
Alerts you to any abnormal data access through advanced machine learning and anomaly detection of user behavior.
Compliance
Ensure corporate compliance by auditing user data access to your critical corporate data stored on-premise or in the cloud.
Protecting Against Ransomware with NetApp Cloud Secure
Cloud Secure performs four major functions:
- Monitor user activity
To accurately identify breaches, every user activity across on-premises and hybrid cloud environments is captured and analyzed. The data is collected using a lightweight, stateless data collector agent installed on a VM in the customer’s environment. This data also includes user data from Active Directory and LDAP servers and user file activity from NetApp ONTAP® and Cloud Volumes ONTAP. Cloud Secure detects anomalies in user behavior by building a behavioral model for each user. From that behavioral model it detects abnormal changes in user activity and analyzes those behavior patterns to determine whether the threat is ransomware or a malicious user. Using this behavioral model reduces false positive noise. - Detect anomalies and identify potential attacks
Today’s ransomware and malware are sophisticated, using random extensions and file names which makes detection by signature-based (blocked list)solutions ineffective. Cloud Secure uses advanced machine learning algorithms to uncover unusual data activity and detect a potential attack. This approach provides dynamic and accurate detection and reduces false detection noise. - Automated response policies
Cloud Secure alerts you and automatically takes a data snapshot when it detects risky behavior, making sure that your data is backed up so that you can recover quickly. - Forensics and user audit reporting
Cloud Secure provides a graphical interface to slice and dice activity data to perform data breach investigations and generate user data access audit reports. It allows multiple views of file data activities by user, time, activity type, and file attributes.
Key benefits
- Detect ransomware attacks before it’s too late
- Minimize the impact of an attack with automatic data backup
- Gain visibility into malicious user activity and identify potential policy risks
- Easily satisfy audit reporting requirements, saving time and money
- Simple SaaS solution, quick time to value, no upgrades, scalable from single departments to global enterprises
Schedule a Demo Today!
Please complete the following form and we will be in touch shortly to set-up a demo.
Setup your Free Trial Today!
Please complete the following form and we will be in touch shortly to set-up a demo.
The Cloud Secure sandbox is a test environment that allows you to explore the features and functionality of the product without affecting your live production data. The sandbox includes a pre-configured, isolated environment that closely resembles a real-world deployment of Cloud Secure.
In this sandbox environment, you can experiment with different configuration options, test new features, and evaluate the product’s performance and functionality. This allows you to gain hands-on experience with Cloud Secure and make informed decisions about whether it is the right solution for their needs. The sandbox environment for NetApp Cloud Secure includes:
- Access to sample data: The sandbox includes access to sample data so you can test the product’s data analytics and reporting features.
- Tutorials and documentation: The sandbox includes tutorials and documentation to help you get started and learn the product’s features and functionality.
- Integration with other NetApp products: The sandbox environment is fully integrated with other NetApp products to provide a complete, end-to-end solution for cloud storage management and optimization.
- Technical support: Users have access to technical support from NetApp experts to help you troubleshoot any issues they encounter.