• Legacy
  • Academy
  • Business
  • PayTech
  • Ignite
  • Cellcos
  • Wired
  • CovidTech
  • Library
  • Touch Base
Subscribe
CW Pakistan

Computerworld Pakistan

CW Pakistan
  • Legacy
  • Academy
  • Business
  • PayTech
  • Ignite
  • Cellcos
  • Wired
  • CovidTech
  • Library
  • Touch Base
  • Business

CSO Pakistan: WannaCry and Public Cloud

  • May 30, 2017
  • Content Desk
Total
0
Shares
0
0
0

Yesterday, I attended a CISO Executive Summit here in NYC.  The room was packed with 175 CISOs and top-level security leaders from various industries.  There was broad agreement that WannaCry was a scramble for many of their teams, and created a long weekend for some.  We concurred that we were lucky the “kill switch” was triggered, and we soberly recognized that the exploit is being redeployed with newly weaponized malware.

The consensus among CISOs is that some key processes were tested, and those with critical structures in place fared much better than those with less mature programs.  At the same time, the incident highlighted the benefits of public cloud computing – and the need to apply automation in order to respond quickly and proactively to threats.

Read: WannaCry Attacks are only the beginning

Implementing a strategy to protect and respond to attacks like these goes beyond patching and extends to automating provisioning that supports continuous integration / continuous delivery (CI/CD) pipelines, and adopting the tenants of immutable infrastructure. When your infrastructure is designed to operate like a piece of software, you can reduce or eliminate the time it takes to respond to events such as WannaCry. We have found AWS indispensable in that regard.

In the best case, clients have a defense in depth strategy with strong endpoint technologies employing artificial intelligence, machine learning, statistical analysis or other buzz-wordy endpoint mitigation technologies.

Read: What We Know and Don’t Know About the International Cyberattack

This is then combined with the abstraction layer afforded by public cloud providers that empowers a clear use of automation, often driven via Infrastructure as Code (IaC) and purposeful orchestration.  The powerful result is that clients can perfectly define the intended state of every environment.  They can then provide assurance that the congruence between dev, stage, test, prod is precise.  By doing so, they accelerate their ability to deploy micro changes in addition to patches and configuration updates while understanding and mitigating many of the risks associated with change.

This year’s DevOps report again confirms that DevOps practices lead to better IT and organizational performance. High-performing IT departments achieve superior speed and reliability relative to lower-performing peers. The 2015 survey showed that high-performing teams deploy code 30 times more often and with 200 times shorter lead times than their peers. And they achieve this velocity and frequency without compromising reliability — in fact, they improve it. High-performing teams experience 60 times fewer failures.

Read: CSO Alerts: Colourful WhatsApp Scam

In the case of WannaCry, the malware exploited a critical SMB remote code execution vulnerability for which Microsoft has already released a patch (MS17-010) in mid-March.

For clients already taking advantage of agile operations and leveraging public cloud technologies,  their environments were unaffected because patches were applied months ago.  If it had been a zero-day exploit, the ability to implement configuration changes efficiently means that teams must still scramble to patch, but you avoid the long weekends.

This article was originally written by Matthew Sharp, CISO, Logicworks and can be accessed here. 

Total
0
Shares
Share 0
Tweet 0
Pin it 0
Related Topics
  • CIO Pakistan
  • CISO
  • Cloud Computing
  • CSO Alerts
  • CSO Online
  • CSO Pakistan
  • cyberattack
  • cybersecurity news
  • DevOps
  • IDG Pakistan
  • Infrastructure as Code
  • International Cyberattack
  • Logicworks
  • Matthew Sharp
  • WannaCry
  • WannaCry and Public Cloud
Content Desk

Previous Article
  • News

Improving Agronomy with Tech: Punjab Agriculture Department Introduces Cotton Crop Monitoring System

  • May 30, 2017
  • Content Desk
View Post
Next Article
  • Computerworld

Talking Technology Evolution and Roadmapping 5G: PTA, MoIT and Qualcomm Host Workshop

  • May 30, 2017
  • Content Desk
View Post
You May Also Like
View Post
  • Business
  • PC World
  • Technology
  • Uncategorized

The Higher Education Commission (HEC) has launched e-courses to make Pakistani universities safer and more inclusive.

  • Sub Editor
  • April 15, 2022
View Post
  • Business
  • Partnerships
  • Technology

The Minister of Information Technology Invites Swedish Technology Companies to Invest in Pakistan

  • Sub Editor
  • April 15, 2022
View Post
  • Business
  • Technology

Daraz creates a long-term plan to improve its ecosystem.

  • Sub Editor
  • April 15, 2022
View Post
  • Business
  • Partnerships

Graana.com and UBL Sign a Memorandum of Understanding to Promote Home Financing on Easy Terms

  • Sub Editor
  • April 15, 2022
View Post
  • Business
  • Event Deck
  • Technology

In Pakistan, a new system has been launched to prohibit stolen and misplaced mobile phones

  • Sub Editor
  • April 15, 2022
View Post
  • Business
  • CIO
  • Technology

A new phase in the process of making KPK Peshawar, Pakistan’s Silicon Valley, will get the country’s first Innovation Park.

  • Sub Editor
  • April 15, 2022
View Post
  • Business
  • Technology

For the second year in a row, 10Pearls makes the Inc. 5000 list of the fastest-growing private companies in the D.C. metro region.

  • Sub Editor
  • April 15, 2022
View Post
  • Business
  • Computerworld
  • Partnerships

As a global citizen, OPPO is contributing to the creation of a sustainable ecosystem.

  • Sub Editor
  • April 15, 2022

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

about
About
Launched in 1967 internationally Computerworld is the oldest tech magazine/ media property in the world. Today Computerworld (abbreviated as CW) is an ongoing decades old professional publication which in 2014 "went digital. In Pakistan Computerworld was launched in 1995.
Read more
Explore Computerworld Sites Globally
  • ComputerWorld.es
  • computerworld.com.pt
  • computerworldmexico.com.mx
  • cw.no
  • computerwoche.de
  • computerwelt.at
  • computersweden.idg.se
  • computerworld.hu
  • cwi.it
  • project.nikkeibp.co.jp
Content from other IDG brands
  • PCWorld
  • Macworld
  • Infoworld
  • TechHive
  • GameStar
  • Network world
CW Pakistan
  • CW MEDIA
  • CXO MEDIA
  • CHEZ WALLET
  • Demo
CW Media & all its sub brands are copyrighted to SPIN-IDG Wakhan Media Inc., the publishing arm of NCC-RP Group. Site is designed by Crunch Collective ©️ 2022

Input your search keywords and press Enter.