{"id":51821,"date":"2023-05-09T12:01:00","date_gmt":"2023-05-09T12:01:00","guid":{"rendered":"https:\/\/www.csoonline.com\/article\/3695771\/nebulons-tripline-offers-ransomware-encryption-protection-for-on-prem-systems.html#tk.rss_security"},"modified":"2023-05-09T12:01:00","modified_gmt":"2023-05-09T12:01:00","slug":"nebulons-tripline-offers-ransomware-encryption-protection-for-on-prem-systems","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/nebulons-tripline-offers-ransomware-encryption-protection-for-on-prem-systems\/","title":{"rendered":"Nebulon’s TripLine offers ransomware encryption protection for on-prem systems"},"content":{"rendered":"
<\/div>\n

Smart infrastructure provider Nebulon today announced the immediate availability of TripLine, an early warning system for cryptographically based ransomware<\/a> attacks on on-premises systems. It\u2019s designed to quickly identify the precise time and system location where an attack has occurred.<\/p>\n

Nebulon said that the new service uses two techniques to achieve this aim. The first is the \u201csecure enclave,\u201d which is a domain isolated from the infrastructure that includes core management and storage functions. Second, it embeds the TripLine functionality into the company\u2019s core Nebulon ON cloud control plane.<\/p>\n

Ransomware is malware that typically encrypts a victim’s files. The attacker then demands a ransom from the victim to restore access to the data upon payment.<\/p>\n

TripLine, according to the company, works by identifying encrypted vs. unencrypted blocks in a user\u2019s storage arrays. Twice a minute, the results of that calculation are sent to the Nebulon ON cloud service, which compares it to the usual average of encrypted blocks \u2014 if the system notices a sudden increase in encrypted blocks, it generates an alert.<\/p>\n

Protecting hyperconverged infrastructure<\/h2>\n

The idea is to provide security for hyperconverged infrastructure systems, which, according to Nebulon, are highly vulnerable to encryption attacks because there\u2019s no isolation between infrastructure and the applications running on them. Even anti-cyberattack systems that rely on snapshotting can become corrupted, making it much more difficult to recover from such an attack.<\/p>\n

\u201cThis leaves enterprises with no choice but to re-install and reconfigure operating systems and clustering software, then recover application data from backup servers which have also likely been compromised,\u201d Nebulon said in a press release.<\/p>\n