The “art of deception network” provides an added dimension to the protection of sensitive health information. This new method uses little bits of code placed at strategic points throughout a network to lure cyberattackers, slow their progress and ultimately trap them. A deception network is numerous sets of lures or traps strategically placed throughout real networks and end-points, says Alton Kizziah, vice president of global managed services at Kudelski Security. It is designed to attract, delay and detect an attackers movement through the targeted organisation as they try to find the way to their objective.Hospital IT systems have become more appealing targets of ransomware attacks, especially because the risk vs. reward scenario highly favours the attacker. When setting up a deception network, a hospital should pay special attention to the lures that can detect ransomware activity and configure managed deceptions accordingly, Kizziah says.Some attacks, known as advanced persistent threats, can be underway for many months prior to being discovered. If an advanced attacker makes it past the basic perimeter controls, deception technology provides the next level of defence, safeguarding the crown jewels of healthcare organisations as well as their most sensitive data and zones, says Ofer Israeli, CEO and founder of Illusive Networks, a vendor of deception network technology and services.

Source: Click here