Webinar on Ransomware Countermeasures Targeting Externally Exposed IT Assets

Increasing ransomware damage, 'attack surface' targeted by various attacks

With the rapid spread of digital technology, many companies and organizations have come to conduct various businesses on digital platforms. While the spread of the internet and cloud services, the increase in IoT (Internet of Things) devices, and the use of technologies such as big data and AI (artificial intelligence) are progressing, malicious criminals are launching cyber attacks targeting these vulnerabilities every day. In particular, the attack surface targeted by cyber attacks, the so-called 'attack surface', is increasing.

How do attackers target vulnerabilities?

In particular, ransomware attacks have increased rapidly in recent years. According to a survey by the Cyber Police Bureau of the National Police Agency, more than 80% of infection routes for companies and organizations affected by ransomware were 'intrusions via VPN or remote desktop devices'. Many attackers first look for information obtained from publicly available information and externally exposed IT assets accessible from the internet, and consider attack targets and methods. Externally exposed IT assets include websites and servers launched by business departments, cloud services used by employees for work, and other assets that the IT department may not fully grasp. Unidentified assets are often left with insufficient security measures, increasing the risk of being targeted as an entry point for cyber attacks.

How should information on externally exposed IT assets, including subsidiaries and group companies, be grasped?

To protect your organization from such cyber attacks, it is important to identify externally exposed IT assets and build a mechanism to continuously and regularly evaluate whether they are 'exposing weaknesses'. However, companies with subsidiaries and group companies may not be able to inventory externally exposed IT assets or grasp the latest status of a large number of IT assets. If appropriate company-wide measures cannot be taken after properly grasping them, it will ultimately increase the risk of security incidents such as cyber attacks.

Explanation of the ASM introduction guidance published by METI and introduction of an easily implementable ASM tool

Under these circumstances, 'ASM (Attack Surface Management)' is attracting attention as a method to protect your company's IT assets from cyber attacks such as ransomware. ASM is gaining momentum as a solution to grasp and manage the ever-increasing attack surface. In 2023, METI published the 'ASM (Attack Surface Management) Introduction Guidance ~Discover and manage your organization's IT assets using externally available information~' (ASM Introduction Guidance). The ASM Introduction Guidance summarizes the features and usage of various tools and services related to ASM. In this seminar, we will explain the basic concepts, features, points to note, and implementation examples of ASM in the ASM Introduction Guidance, and introduce 'Net de Shindan ASM', which features user-friendliness unique to domestic products and an easy-to-introduce price range. It is especially recommended for those who have 'many sites (domains) in various departments within the organization' or 'have issues managing many externally exposed IT assets such as subsidiaries and group companies'. Please use it as a hint for strengthening security.

Organizer and co-organizer GMO Cybersecurity by Ierae, Inc. ■Cooperation Majisemi, Inc.

For details and registration, click here.

Majisemi will continue to hold webinars that are 'useful for participants'.

Past seminar materials and other open seminars can be viewed ▶here.

Majisemi, Inc.

3-12 Kioicho, Chiyoda-ku, Tokyo 102-0094 Contact: https://majisemi.com/service/contact/