CW Pakistan
  • Legacy
  • Academy
  • Business
  • PayTech
  • Ignite
  • Cellcos
  • Wired
  • CovidTech
  • PCWorld
  • Macworld
  • Infoworld
  • TechHive
  • GameStar
  • Networkworld
0
0
0
Subscribe
CW Pakistan

Computerworld Pakistan - Since 1995

CWPakistan
  • Legacy
  • Academy
  • Business
  • PayTech
  • Ignite
  • Cellcos
  • Wired
  • CovidTech
  • Business

CSO Pakistan: WannaCry and Public Cloud

  • May 30, 2017
Total
0
Shares
0
0
0

Yesterday, I attended a CISO Executive Summit here in NYC.  The room was packed with 175 CISOs and top-level security leaders from various industries.  There was broad agreement that WannaCry was a scramble for many of their teams, and created a long weekend for some.  We concurred that we were lucky the “kill switch” was triggered, and we soberly recognized that the exploit is being redeployed with newly weaponized malware.

The consensus among CISOs is that some key processes were tested, and those with critical structures in place fared much better than those with less mature programs.  At the same time, the incident highlighted the benefits of public cloud computing – and the need to apply automation in order to respond quickly and proactively to threats.

Read: WannaCry Attacks are only the beginning

Implementing a strategy to protect and respond to attacks like these goes beyond patching and extends to automating provisioning that supports continuous integration / continuous delivery (CI/CD) pipelines, and adopting the tenants of immutable infrastructure. When your infrastructure is designed to operate like a piece of software, you can reduce or eliminate the time it takes to respond to events such as WannaCry. We have found AWS indispensable in that regard.

In the best case, clients have a defense in depth strategy with strong endpoint technologies employing artificial intelligence, machine learning, statistical analysis or other buzz-wordy endpoint mitigation technologies.

Read: What We Know and Don’t Know About the International Cyberattack

This is then combined with the abstraction layer afforded by public cloud providers that empowers a clear use of automation, often driven via Infrastructure as Code (IaC) and purposeful orchestration.  The powerful result is that clients can perfectly define the intended state of every environment.  They can then provide assurance that the congruence between dev, stage, test, prod is precise.  By doing so, they accelerate their ability to deploy micro changes in addition to patches and configuration updates while understanding and mitigating many of the risks associated with change.

This year’s DevOps report again confirms that DevOps practices lead to better IT and organizational performance. High-performing IT departments achieve superior speed and reliability relative to lower-performing peers. The 2015 survey showed that high-performing teams deploy code 30 times more often and with 200 times shorter lead times than their peers. And they achieve this velocity and frequency without compromising reliability — in fact, they improve it. High-performing teams experience 60 times fewer failures.

Read: CSO Alerts: Colourful WhatsApp Scam

In the case of WannaCry, the malware exploited a critical SMB remote code execution vulnerability for which Microsoft has already released a patch (MS17-010) in mid-March.

For clients already taking advantage of agile operations and leveraging public cloud technologies,  their environments were unaffected because patches were applied months ago.  If it had been a zero-day exploit, the ability to implement configuration changes efficiently means that teams must still scramble to patch, but you avoid the long weekends.

This article was originally written by Matthew Sharp, CISO, Logicworks and can be accessed here. 

Total
0
Shares
Share 0
Tweet 0
Pin it 0
Related Topics
  • CIO Pakistan
  • CISO
  • Cloud Computing
  • CSO Alerts
  • CSO Online
  • CSO Pakistan
  • cyberattack
  • cybersecurity news
  • DevOps
  • IDG Pakistan
  • Infrastructure as Code
  • International Cyberattack
  • Logicworks
  • Matthew Sharp
  • WannaCry
  • WannaCry and Public Cloud
Content Desk

Previous Article
  • News

Improving Agronomy with Tech: Punjab Agriculture Department Introduces Cotton Crop Monitoring System

  • May 30, 2017
View Post
Next Article
  • Computerworld

Talking Technology Evolution and Roadmapping 5G: PTA, MoIT and Qualcomm Host Workshop

  • May 30, 2017
View Post
You May Also Like
View Post
  • Business

Nayatel Attains ISO 27001 and ISO 27701 Certifications, Bolstering Data Security and Privacy

  • Sub Editor
  • August 7, 2023
View Post
  • Business
  • Wired

Boosting IT Exports: Pakistan Aims for $15 Billion Growth in the Coming Years, Says IT Minister

  • Sub Editor
  • August 2, 2023
View Post
  • Business

Pakistan Takes Stride Towards Digital Privacy: “Personal Data Protection Bill, 2023” Approved

  • Sub Editor
  • July 31, 2023
View Post
  • Business

Pakistan Stock Exchange’s KSE-100 Index Surpasses 47,000 Mark with IMF Deal Boost

  • Sub Editor
  • July 27, 2023
View Post
  • Business

Government Proposes New Rules for Computer Emergency Response Team

  • Sub Editor
  • July 25, 2023
View Post
  • Business
  • Wired

COMSTECH Launches Somalia Science and Technology Cooperation Program for Enhanced Bilateral Collaborations

  • Sub Editor
  • July 22, 2023
View Post
  • Business

Crypto Scam Hack: Deputy Commissioner Islamabad’s Twitter Account Breached Date: 22 July 2023

  • Sub Editor
  • July 22, 2023
View Post
  • Business
  • Wired

Pakistan’s IT Revolution: PM Shahbaz Sharif Leads Seminar to Propel Economic Growth

  • Sub Editor
  • July 21, 2023
View Post
  • Business
  • Wired

Azerbaijani Minister Explores Opportunities in Pakistan as COMSATS and IDDA for ICT and Technology Training

  • Sub Editor
  • July 19, 2023
View Post
  • Business

Federal Cabinet Approves CERT Rules 2023 to Bolster Cybersecurity in Pakistan

  • Sub Editor
  • July 17, 2023

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Smart Pakistan Insights Network
https://www.youtube.com/watch?v=uNE1Nq1iXHg
Explore Computerworld Sites Globally
  • ComputerWorld.es
  • computerworld.com.pt
  • Computerworld.com
  • cw.no
  • computerworldmexico.com.mx
  • computerwoche.de
  • computersweden.idg.se
  • computerworld.hu
  • computerworld.hu
  • cwi.it
  • project.nikkeibp.co.jp
Content from other IDG brands
  • PCWorld
  • Macworld
  • Infoworld
  • TechHive
  • GameStar
  • Networkworld
CW Pakistan
  • CWPK
  • CWPK
  • CXO
  • CXO
  • WALLET
  • WALLET
  • Demo
  • Demo
Computerworld Pakistan

Input your search keywords and press Enter.