Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events

Current Status

This project has entered the build phase. We have selected several technology collaborators who have signed a Cooperative Research and Development Agreement (CRADA: see an example) with the National Institute of Standards and Technology (NIST).

Download the Identifying and Protecting Assets Against Ransomware and Other Destructive Events Project Description for more information on this project. 

Summary

The National Cybersecurity Center of Excellence (NCCoE) at NIST is proposing a project that could help organizations identify and protect their assets from data integrity attacks across multiple industries. This project will include the development of a reference design and use commercially available technologies to develop an example solution that will help various organizations implement stronger security controls.

Ransomware, destructive malware, insider threats, and even honest mistakes present an ongoing threat to an organization’s infrastructure. Database records, system files, configurations, user files, applications, and customer data are all at risk should an attack occur. 

Organizations that do not implement identification and protection solutions leave themselves at risk for many types of data integrity attacks. These risks could be reduced using capabilities such as:

  • secure storage
  • backup capabilities for databases, VMs, and file systems
  • log collection
  • asset inventory
  • file integrity checking mechanisms

This project focuses on methods to effectively identify assets that may become targets of data integrity attacks. It will also explore methods to protect these assets against data integrity attacks through the use of audit logs, vulnerability management, maintenance, and other potential solutions. It will result in a publicly available NIST Cybersecurity Practice Guide, a detailed implementation guide of the practical steps required to implement a cybersecurity reference design that addresses this challenge.

Collaborating Vendors

Organizations participating in this project submitted their capabilities in response to an open call in the Federal Register for all sources of relevant security capabilities from academia and industry (vendors and integrators). The following respondents with relevant capabilities or product components (identified as “Technology Partners/Collaborators” herein) signed a Cooperative Research and Development Agreement to collaborate with NIST in a consortium to build this example solution.

Cisco
CryptoniteNXT
GreenTec USA logo
Micro Focus logo
Semperis
Symantec logo
Tripwire logo