{"id":3962,"date":"2022-07-13T16:16:35","date_gmt":"2022-07-13T20:16:35","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=3962"},"modified":"2022-07-13T16:16:52","modified_gmt":"2022-07-13T20:16:52","slug":"outdated-connected-devices-open-the-door-to-ransomware","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/","title":{"rendered":"Don\u2019t Let Outdated Connected Devices Open the Door to Ransomware"},"content":{"rendered":"

\"Don\u2019t<\/a><\/p>\n

As part of Solutions Review’s Premium Content Series\u2014a collection of contributed columns written by industry experts in maturing software categories\u2014Chris Westphal, the Cybersecurity Evangelist and Head of Product Marketing at <\/span>Ordr<\/span><\/a>, explains the risks involved in outdated connected devices and how to avoid or resolve them.<\/span><\/strong><\/em><\/p>\n

\"3The number of connected devices connecting to your network\u2014personal devices, IT devices, IoT, and OT devices such as video surveillance cameras, HVAC systems, manufacturing equipment, and more\u2014has increased steadily in recent years, and there are no signs that device proliferation will slow down any time soon. As such, the rise of connected devices means an organization’s attack surface will continue to increase, making it harder to retain control and maintain security.<\/span>\u00a0<\/span><\/p>\n

Unsecured, unprotected, and outdated connected devices in your organization’s network can create a security nightmare. They can easily open a door for threat actors to break into your network and access critical information. If the worse case happens, <\/span>proper device visibility and management are crucial for identifying the compromised devices and segmenting<\/span> infected ones to stop lateral movement. <\/span><\/p>\n

For example, in the case of healthcare facilities<\/a>, the need for strong visibility and control takes on an added level of urgency, as security teams need to ensure critical patient care isn’t affected during an attack. The same can be said for other industries, such as manufacturing, where operator safety can be a concern during a security breach.<\/span>\u00a0<\/span>Organizations need to improve their visibility and control of what’s on their network to solve the problem.<\/span>\u00a0<\/span><\/p>\n

Connected Devices are Unsecure\u00a0<\/strong><\/h3>\n

The devices themselves are often the most significant security risk. <\/span>About 42 percent<\/span>\u00a0of devices<\/span> can be defined as IoT, IoMT, OT devices, and agentless devices that have not been designed with security in mind. Security has been an afterthought for most of these devices, as little to zero consideration has been given to updating them over time. In addition, these devices remain in operation for years. Think of hospital beds, X-ray machines, or welding assemblies\u2014these are not the types of equipment changed on your typical laptop or mobile phone replacement schedule.<\/span>\u00a0<\/span><\/p>\n

Another issue with these connected devices is that they cannot support traditional endpoint security agents, making them the ideal initial threat vector for an attacker to target. Cyber-criminals can use a connected device to access an environment and begin a lateral movement from the device to other parts of the network. One of the first high-profile cases is still the best example of this is when attackers used an HVAC system to break into a multinational retailers’ network.<\/span>\u00a0<\/span><\/p>\n

Necessary Context\u00a0<\/strong><\/h3>\n

During an incident, to get from “detection to response,”<\/a><\/strong> you need to know the exact device that is compromised, where it’s located (the physical and network location), what it’s doing in the network, and what actions are possible (i.e., what is it able to connect to). That’s why visibility is critical to identifying, stopping, and preventing ransomware spread. <\/span>\u00a0<\/span><\/p>\n

Every network has a mix of managed (laptops, servers, etc.) and unmanaged connected devices (mobile phones, IoT devices, sensors, etc.). Without insight into the whole picture, it is impossible to move from detection of a problem to a response. Those without visibility are stuck spending a great deal of time and effort identifying every possibility, or they’re left missing potential sources and infection points.<\/span>\u00a0<\/span><\/p>\n

A comprehensive asset inventory is needed for security teams to do their jobs correctly.<\/span>\u00a0<\/span><\/p>\n

Defining the Normal\u00a0<\/strong><\/h3>\n

Once you’ve developed a complete view of your assets and have them as up-to-date as possible with current versions, patches, settings, and protections, you should create a “normal” behavior baseline. Devices have specific functions, which means their behavior and communication patterns are deterministic. <\/span>This baseline can identify and measure any strange behavior in the future, such as a connected hospital bed that’s suddenly communicating to Russia. This baseline is also essential insight and the foundation for creating zero-trust policies<\/a><\/strong>.<\/span>\u00a0<\/span><\/p>\n

Common Issues and Actions\u00a0<\/strong><\/h3>\n

Once you have a complete inventory of what’s on your network, your efforts need to shift toward taking action. To be better prepared to ward off attacks, teams need to identify devices with outdated operating systems, for example. Many connected devices with long life cycles were not created to be updated past a specific operating system. This limitation becomes a problem when these devices can connect to the internet but cannot receive the latest security protections and updates. <\/span>\u00a0<\/span><\/p>\n

Next, devices with default passwords, weak passwords, or expired certificates should be identified and updated. Then teams can move on to the more intensive actions, such as determining which devices may be susceptible to specific vulnerabilities and threats, such as Log4j.\u00a0<\/span>\u00a0<\/span><\/p>\n

For devices at risk, including those that cannot be updated or patched, the next step is proactive segmentation. Zero trust segmentation policies allow these devices to maintain required access to perform business-critical functions while limiting their exposure and the exposure of the entire organization. That way, the ability for an attacker to move from an infected welding robot to other parts of the network is minimal and can be identified and stopped quickly.<\/span><\/p>\n

\n


Widget not in any sidebars
<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

As part of Solutions Review’s Premium Content Series\u2014a collection of contributed columns written by industry experts in maturing software categories\u2014Chris Westphal, the Cybersecurity Evangelist and Head of Product Marketing at Ordr, explains the risks involved in outdated connected devices and how to avoid or resolve them. The number of connected devices connecting to your network\u2014personal […]<\/p>\n","protected":false},"author":221,"featured_media":3964,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551],"tags":[1852,1851,1430,1745,276,1798],"acf":[],"yoast_head":"\nDon\u2019t Let Outdated Connected Devices Open the Door to Ransomware<\/title>\n<meta name=\"description\" content=\"As part of Solutions Review's Premium Content Series, Chris Westphal of Ordr explains the risks involved in outdated connected devices.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Don\u2019t Let Outdated Connected Devices Open the Door to Ransomware\" \/>\n<meta property=\"og:description\" content=\"As part of Solutions Review's Premium Content Series, Chris Westphal of Ordr explains the risks involved in outdated connected devices.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/\" \/>\n<meta property=\"og:site_name\" content=\"Best Information Security SIEM Tools, Software, Solutions & Vendors\" \/>\n<meta property=\"article:published_time\" content=\"2022-07-13T20:16:35+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-07-13T20:16:52+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2022\/07\/Dont-Let-Outdated-Connected-Devices-Open-the-Door-to-Ransomware.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Chris Westphal\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Chris Westphal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/\",\"name\":\"Don\u2019t Let Outdated Connected Devices Open the Door to Ransomware\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2022\/07\/Dont-Let-Outdated-Connected-Devices-Open-the-Door-to-Ransomware.jpg\",\"datePublished\":\"2022-07-13T20:16:35+00:00\",\"dateModified\":\"2022-07-13T20:16:52+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/5d7a35dd1abc003038f7b51d46f6d071\"},\"description\":\"As part of Solutions Review's Premium Content Series, Chris Westphal of Ordr explains the risks involved in outdated connected devices.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2022\/07\/Dont-Let-Outdated-Connected-Devices-Open-the-Door-to-Ransomware.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2022\/07\/Dont-Let-Outdated-Connected-Devices-Open-the-Door-to-Ransomware.jpg\",\"width\":800,\"height\":400,\"caption\":\"Don\u2019t Let Outdated Connected Devices Open the Door to Ransomware\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Don\u2019t Let Outdated Connected Devices Open the Door to Ransomware\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"Best Information Security SIEM Tools, Software, Solutions & Vendors\",\"description\":\"Buyer's Guide and Best Practices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/5d7a35dd1abc003038f7b51d46f6d071\",\"name\":\"Chris Westphal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/5ac39eb534343a8d0bac3a6c642a15fc?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/5ac39eb534343a8d0bac3a6c642a15fc?s=96&d=mm&r=g\",\"caption\":\"Chris Westphal\"},\"description\":\"Chris Westphal is the Cybersecurity Evangelist and Head of Product Marketing at Ordr, where he helps drive awareness for connected device security and the value of the Ordr solution. Chris brings over two decades of experience to his role with a background in enterprise security, cloud, and data center technologies. Most recently, Chris was head of product marketing at Salt Security, the leader in API protection, and has held product marketing leadership roles at companies including VMware, Illumio, and Adallom (acquired by Microsoft).\",\"sameAs\":[\"https:\/\/ordr.net\/\"],\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/cwestphal\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Don\u2019t Let Outdated Connected Devices Open the Door to Ransomware","description":"As part of Solutions Review's Premium Content Series, Chris Westphal of Ordr explains the risks involved in outdated connected devices.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/","og_locale":"en_US","og_type":"article","og_title":"Don\u2019t Let Outdated Connected Devices Open the Door to Ransomware","og_description":"As part of Solutions Review's Premium Content Series, Chris Westphal of Ordr explains the risks involved in outdated connected devices.","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/","og_site_name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","article_published_time":"2022-07-13T20:16:35+00:00","article_modified_time":"2022-07-13T20:16:52+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2022\/07\/Dont-Let-Outdated-Connected-Devices-Open-the-Door-to-Ransomware.jpg","type":"image\/jpeg"}],"author":"Chris Westphal","twitter_misc":{"Written by":"Chris Westphal","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/","name":"Don\u2019t Let Outdated Connected Devices Open the Door to Ransomware","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2022\/07\/Dont-Let-Outdated-Connected-Devices-Open-the-Door-to-Ransomware.jpg","datePublished":"2022-07-13T20:16:35+00:00","dateModified":"2022-07-13T20:16:52+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/5d7a35dd1abc003038f7b51d46f6d071"},"description":"As part of Solutions Review's Premium Content Series, Chris Westphal of Ordr explains the risks involved in outdated connected devices.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2022\/07\/Dont-Let-Outdated-Connected-Devices-Open-the-Door-to-Ransomware.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2022\/07\/Dont-Let-Outdated-Connected-Devices-Open-the-Door-to-Ransomware.jpg","width":800,"height":400,"caption":"Don\u2019t Let Outdated Connected Devices Open the Door to Ransomware"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/outdated-connected-devices-open-the-door-to-ransomware\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"Don\u2019t Let Outdated Connected Devices Open the Door to Ransomware"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","description":"Buyer's Guide and Best Practices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/5d7a35dd1abc003038f7b51d46f6d071","name":"Chris Westphal","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/5ac39eb534343a8d0bac3a6c642a15fc?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5ac39eb534343a8d0bac3a6c642a15fc?s=96&d=mm&r=g","caption":"Chris Westphal"},"description":"Chris Westphal is the Cybersecurity Evangelist and Head of Product Marketing at Ordr, where he helps drive awareness for connected device security and the value of the Ordr solution. Chris brings over two decades of experience to his role with a background in enterprise security, cloud, and data center technologies. Most recently, Chris was head of product marketing at Salt Security, the leader in API protection, and has held product marketing leadership roles at companies including VMware, Illumio, and Adallom (acquired by Microsoft).","sameAs":["https:\/\/ordr.net\/"],"url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/cwestphal\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3962"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/221"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=3962"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/3962\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/3964"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=3962"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=3962"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=3962"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}