Hiện nay, trước các mối đe dọa gia tăng từ ransomware và các hình thức tấn công mạng khác, Vina Aspire xin gửi đến Quý khách hàng một số khuyến cáo quan trọng nhằm tăng cường bảo mật hệ thống và bảo vệ thông tin doanh nghiệp:
–
Kaspersky khuyến cáo khách hàng bảo mật thông tin/hệ thống bằng các phương thức sau:
- Do not expose remote desktop services (such as RDP) to public networks unless absolutely necessary and always use strong passwords for them.
- Promptly install available patches for commercial VPN solutions providing access for remote employees and acting as gateways in your network.
- Always keep software updated on all the devices you use to prevent ransomware from exploiting vulnerabilities
- Focus your defense strategy on detecting lateral movements and data exfiltration to the Internet. Pay special attention to the outgoing traffic to detect cybercriminals’ connections.
- Back up data regularly. Make sure you can quickly access it in an emergency when needed.
- Use the latest Threat Intelligence (https://www.kaspersky.com/enterprise-security/threat-intelligence) information to stay aware of actual TTPs used by threat actors.
- Use solutions like Kaspersky Endpoint Detection and Response (https://www.kaspersky.com/enterprise-security/endpoint-detection-response-edr) and Kaspersky Managed Detection and Response service (https://www.kaspersky.com/enterprise-security/managed-detection-and-response) which help to identify and stop the attack on early stages, before attackers reach their final goals.
- To protect the corporate environment, educate your employees. Dedicated training courses can help, such as the ones provided in the Kaspersky Automated Security Awareness Platform (https://www.kaspersky.com/small-to-medium-business-security/security-awareness-platform).
- Use a reliable endpoint security solution, such as Kaspersky Endpoint Security for Business that is powered by exploit prevention, behavior detection and a remediation engine that is able to roll back malicious actions. KESB also has self-defense mechanisms which can prevent its removal by cybercriminals.
Our recommendations for configuration of KES are listed here: https://support.kaspersky.com/14742
Additionally, we would suggest implementing the following points as well:
1. Enable all the protection components. Particularly make sure the following components are active:
- File Threat Protection
- Web Threat Protection
- Mail Threat Protection
- Network Threat Protection
- Behavior Detection
- Remediation Engine
- Automatic Exploit Prevention
- Host Intrusion Prevention
- Kaspersky Security Network
2. Make sure that Self-Defence of the product is enabled.
3. Enable the protection of shared folders: https://support.kaspersky.com/KESWin/11/en-us/151229.htm
4. Enable the password protection of the settings: https://support.kaspersky.com/KESWin/11/en-us/41045.htm
5. Enable the detection of potentially unwanted software that can be used by criminals: Settings -> Exclusions -> Objects for detection -> enable the checkbox “Other”.
6. If possible, implement the White List mode (aka default Deny) using Application Control: https://support.kaspersky.com/KESWin/11/en-US/128213.htm
Vina Aspire là công ty tư vấn, cung cấp các giải pháp, dịch vụ CNTT, An ninh mạng, bảo mật & an toàn thông tin tại Việt Nam. Đội ngũ của Vina Aspire gồm những chuyên gia, cộng tác viên giỏi, có trình độ, kinh nghiệm và uy tín cùng các nhà đầu tư, đối tác lớn trong và ngoài nước chung tay xây dựng.
Các Doanh nghiệp, tổ chức có nhu cầu liên hệ Công ty Vina Aspire theo thông tin sau:
Email: info@vina-aspire.com | Website: www.vina-aspire.com
Tel: +84 944 004 666 | Fax: +84 28 3535 0668
Vina Aspire – Vững bảo mật, trọn niềm tin
