Tape Backup Advantages for Ransomware

The increasing number of ransomware attacks has become a major issue for many organizations across the globe. Organizations don't want to become the next ransomware headline, so they are reevaluating their data protection processes and technologies. One technology/practice back in the spotlight is backing up to tape, taking advantage of physical "air-gaps" to protect against delayed ransomware attacks.

With the increasing number of ransomware attacks appearing in business and technology headlines over the last couple of years, many companies are reconsidering tape backup advantages to protect their organizations against these growing threats.

For decades, traditional backup has been used as an insurance policy to recover from system issues. Backing up to tape entails creating an image of a server, so in the event of a server issue, the server's operating system and data (present at the time of the backup) can be reinstalled quickly. However, traditional backup is slowly being replaced with other technologies — many organizations have adopted the practice of backing up to spinning, on-premises disk or the cloud.

Newer ransomware attacks have evolved to infect the entire backup process, bringing the whole disaster recovery practice into question. In a ransomware attack, an organization's computer(s), including backup servers, are infected and encrypted. Once locked, the computer owner is instructed that their computer will be unlocked, but only if a ransom is paid.

In the City of Baltimore's case, they refused to pay and ended up spending approximately $18 million for new equipment and damages, according to The Baltimore Sun.

Ransomware is Patient

Oftentimes, a ransomware attack is intentionally delayed to infect many months of backup tapes, ensuring the company cannot restore the infected systems from recent backup tapes. In many cases, it can take weeks or months for companies to recognize they were even hacked. During that time, uninfected server backups are overwritten with the malware or ransomware. After a predetermined period, the hacker triggers the ransomware, shutting down all employee access to critical systems, and the organization has no way to recover from it.

Because of the nature of ransomware attacks, a new backup theory is evolving. The only way to beat a ransomware attack is to regularly generate a series of "golden copy" backups (before infection) and completely isolate them, so that many remain uninfected and available for use when needed. This recovery process of good or clean data is known as isolated recovery.

Securing Critial Data from Ransomware Attack

Isolated recovery relies on the storage media's actual physical isolation — or "air gap." Air gaps are disconnected storage resources, separated from the network and restricted from users without proper clearance. But in practice, segregating every individual backup copy across the enterprise is no longer feasible due to cost. Therefore, an isolated recovery process is best targeted at mission-critical data that the organization absolutely requires so the business can recover quickly.

Physical isolation is easily accomplished with tape backups and removable media. Obviously, cloud-based backup and the air-gap defense is more difficult — cloud storage systems are connected to the internet and accessible to users when needed. However, it's also feasible to create and store backups in a cloud repository to be retained for an extended period.

An average of 4,000 ransomware episodes occur every day

Active Archives

Isolated recovery offers a proven strategy for effective ransomware defense. Organizations are moving to technologies such as active archives — a storage architecture that gives the user access to data stored across the enterprise, and automatically moves data, based on policies, between various storage systems and tiers. Active archives enable reliable, online and cost-effective access to enterprise data throughout the data life cycle, spanning across all repository types, including SSDs, HDDs, tape and the cloud. A 2019 Active Archive Alliance survey revealed that 40% of respondents have plans to deploy an active archive this year, prioritizing tape backup advantages in their organization.

Interested in Tape Backup?  Contact your BackupWorks Account Rep today at 866 801 2944