Inside Immutable Backup Architecture: How Air-Gapped and WORM Storage Actually Stop Ransomware
Most ransomware operators don't bother trying to break into a backup system. They go after whoever already has the keys.
That's not a new problem. In the 1870s, bank robbers found the same shortcut. You didn't necessarily have to defeat a vault. You needed the person who knew how to open it.
The answer was the time lock, a mechanism that could prevent the vault from opening during a defined period, even when someone had the correct combination. The interesting part wasn't that the vault had become harder to break. The rule had moved below the person operating the lock, out of reach of anyone standing in front of it with a gun, a grudge, or a convincing story.
Modern backup infrastructure has the same weak point, and the rest of this piece follows it the way an attacker would. Let's assume the attacker already won the first step, a...
Copyright of this story solely belongs to hackernoon.com. To see the full text click HERE