IBM has developed AI-assisted storage security technology. Capable of intercepting and deactivating ransomware, this solution will be integrated into the American giant’s FlashCore storage modules (FCM).
Ransomware, or ransomware in English, is a type of malware that encrypts a computer system or files, requiring its owner to pay a ransom to regain access to them. These cyberattacks are becoming more and more numerous, regrets IBM in a blog post. The company cites a study from TechTarget’s Enterprise Strategy Group, a leading analyst firm, concluding that 89% of organizations view ransomware as one of the top five threats to their viability. The risk is even greater today, with advances in artificial intelligence (AI).
Responding to the AI threat with AI
“ Businesses must take a “defense in depth” approach against ransomware and other cyberattacks, especially as malware becomes more sophisticateds,” explains Dave Pearson, vice president at IDC, a market analysis firm.
This is precisely what IBM is offering with its new solution. The company is adding AI capabilities to its FlashCore Module 4 SSDs, available in new Storage FlashSystem products, servers used by many companies. The technology is coupled with a new version of IBM Storage Defender software, “ to help organizations improve their ability to detect and respond to ransomware and other cyberattacks that threaten their data », Details IBM.
Using machine learning models trained to detect ransomware-specific behaviors, the solution continuously monitors statistics collected from each input/output operation. This way, it can distinguish between normal behavior and patterns that indicate the presence of ransomware or malware. In this scenario, information is transmitted to IBM Storage Insights software via Defender, which can alert operators when a workload anomaly is detected.
Speed of detection, an essential element against ransomware
By acting quickly, victims are able to immediately take corrective action to protect the attacked data. System speed is key: malicious code execution is difficult to intercept, but in the case of ransomware, data encryption takes time. The process can take anywhere from a few minutes to a few hours, allowing time to intercept an attack before it becomes critical.
IBM assures that its products help “ avoid threats in the first place, but also speed up the recovery process in case attackers have managed to infiltrate “.
Sources: IBM, Forbes
0