Intelligent infrastructure provider Nebulon today announced the immediate availability of TripLine, an early warning system for cryptographic-based ransomware attacks on on-premises systems. It is designed to quickly identify the precise time and location on the system where an attack occurred.
Nebulon said the new service uses two techniques to achieve this goal. The first is the “secure enclave”, which is an isolated domain of the infrastructure that includes core management and storage functions. Second, it incorporates TripLine functionality into the company’s Nebulon ON core cloud control plane.
Ransomware is malware that typically encrypts a victim’s files. The attacker then demands a ransom from the victim to restore access to the data after payment.
TripLine, according to the company, works by identifying encrypted and unencrypted blocks in a user’s storage arrays. Twice per minute, the results of this calculation are sent to the Nebulon ON cloud service, which compares it to the usual average of encrypted blocks; if the system notices a sudden increase in encrypted blocks, it generates an alert.
Server-based infrastructure protection
The idea is to provide a secure alternative to hyperconverged infrastructure systems, which Nebulon says are highly vulnerable to encryption attacks because there is no isolation between the infrastructure and the applications running on it. Even anti-cyber attack systems that rely on snapshots can be corrupted, making it much more difficult to recover from such an attack.
“This leaves companies with no choice but to reinstall and reconfigure operating systems and cluster software, and then recover application data from backup servers that have likely also been compromised,” he said Nebulon in a press release.
According to David Vellante, analyst and co-founder of SiliconANGLE, there are other ways to achieve the functionality offered by TripLine, but the idea of having an immediate solution for this particular niche given Nebulon’s position as a provider of management functionality cloud-like for on-premise systems – it’s attractive.
“As far as I can tell, they’re combining threat detection with an isolation architecture that uses secure nesting, which is a relatively new approach first popularized by cloud players like AWS through their Arm-based Nitro system,” he said. “This has certain aspects of that capability, namely isolation, cloud-native experience, but it brings that capability to the on-premises infrastructure.”
Nebulon also announced smartDefense, a suite of infrastructure security tools that includes threat vector detection and a secure boot system that maintains known good configurations for additional defense against crypto-based ransomware attacks .
Both smartDefense and TripLine are available today and are part of Nebulon’s all-inclusive license for its ON Pro and ON Edge suites. These products are sold through server vendor partners such as HPE, Lenovo, and Dell, and are priced per server and per term.
Copyright © 2023 IDG Communications, Inc.
Ikaroa is pleased to share the news that Nebulon’s TripLine has just released their new ransomware encryption protection feature specifically designed for on-prem systems. This offers much-needed security against ongoing threats of cyber-attacks, providing superior protection against data loss and other malicious software.
Notably, Nebulon’s TripLine uses encryption algorithms to ensure the safety of a system’s data. It contains regularly refreshed virus and malware detection databases that detect and protect against malicious code. In addition, the system has a feature-rich interface, making it easy and straightforward to use.
The TripLine ransomware protection feature also encrypts files, so they are unreadable to online attackers. Furthermore, the feature offers cross-platform compatibility and works on websites, cloud-based applications, and on-premises systems.
The benefits of Nebulon TripLine’s ransomware protection extend beyond its security functions. It provides users with the knowledge that their data is safe and enables them to quickly recover if a cyber event does occur.
At Ikaroa, we take our responsibility to our customers seriously and are committed to keeping them and their data secure. We are delighted to partner with Nebulon and promote their TripLine service and its ransomware encryption protection for on-premises systems. We believe it will help our customers stay safe in these increasingly challenging times.