A speaker argues that the Institute for Security and Technology's ransomware strategies like awareness campaigns and insurance payouts won't work because they still allow payments to attackers. He says the only real solution is banning ransom payments entirely, comparing current approaches to treating cancer symptoms instead of curing the disease.
Chapters
What were they thinking? The Institute for Security and Technology— this group— has shown they know very little about dealing with intelligent cybersecurity threats, specifically ransomware. They have given some poor recommendations that unfortunately will derail our ability to actually end ransomware. See, There actually is a way to end ransomware, and it's to choke off all the money going to the attackers who are motivated, well, to make money. As long as the money flows, they will continue to grow stronger and attack more. When the money stops, the attackers will move back to less impactful and much more manageable activities. But this group, they're recommending against pro— pro— prohibition against digital extortion payments. Rather, their less than brilliant plan includes spending more money on a metrics program, a campaign awareness program to pay more to insurance companies, spend more on preparations to be attacked, and to responses to being attacked and to set up a response fund, none of which will actually stop ransomware attacks from happening. There are documented plans in how to carefully implement a ban that would address all of the concerns people have raised, but this group has apparently not done its research. So let me ask you, if we were having a conversation about cancer and there was a known cure, should we invest in a metrics program and better response for those who are impacted? Or should we actually put our efforts into deploying the real cure that eradicates it from existence? Now their plan actually supports the criminals continuing to be paid. That creates more crime and it actually encourages more people to become criminals. What do you think?
