GGB Magazine February 2022 | Page 16

REAL-TIME REALITIES gaming system if the property perceives a cyberattack taking place . When taking this step , in order for it to remain effective in the event of a ransomware attack , the organization will need make sure that real-time player card , points , and promotion data are maintained .

REAL-TIME REALITIES gaming system if the property perceives a cyberattack taking place . When taking this step , in order for it to remain effective in the event of a ransomware attack , the organization will need make sure that real-time player card , points , and promotion data are maintained .

Another part can be added to this first recommended step as an additional security measure : implement a manual system at the property . This will be tremendously useful in the event that the ransomware attack imposes a complete system lockdown .
The second action that should always be taken is probably the most obvious ; back up the property ’ s casino data . Backups should be running every minute , and are good practice to implement if the operation is not already doing so . In addition to data backups serving as a crucial method of steering clear of encryption attacks due to the possibility that the encrypted data can perhaps be restored , backups also serve the purpose of ensuring that the organization can be restored to business as usual in case a power outage occurs , while minimizing the loss of information .
Isolating and segmenting the casino ’ s systems is the third step . The systems are running on a physical network , so make sure that the necessary gaming systems are capable of completely being isolated from the external environment and any other systems . This process of ensuring complete isolation can be expected to require diligent planning , keeping in mind that some games — wide-area progressives , for example — will require external connection . By taking this precaution to create complete isolation , a casino will allow the organization to entirely cut off critical systems and allow for logins .
The fourth step , running full cybersecurity defense mechanisms , will be an increasingly useful tool in defending against certain ransomware attacks . These highly sophisticated cyber defense mechanisms go much further than basic penetration testing , extending the use of artificial intelligence ( AI ) - and machine learning ( ML ) -based active monitoring tools to identify the existence of unusual sequences of input / output functions .
For example , a conspicuous change in an operation ’ s daily incremental backup volume will alert system administrators . In addition to being an essential indicator that a ransomware attack on the casino is happening before a human would be able to realize it , it is incredibly useful as it helps identify the most recent known good backup during the process of recovering .
A fully implemented cybersecurity defense mechanism accompanied by a well-resourced cybersecurity defense team that constantly monitors cyber protection will prove to be an immensely valuable asset to the casino ’ s cybersecurity efforts . The aforementioned AI / ML applications aren ’ t a perfect defense on their own despite providing additional significant layers of protection to an operation ’ s cyber defense ; therefore , the software used in conjunction with a serious cyber security defense team should be an essential part of every gaming operation ’ s budget .
Without taking these more drastic security measures and ensuring that a cyber defense budget is in place for them , the casino will be spotted by cyberattackers as an easy target and should start planning their ransomware defense now because it will only be a matter of time until the attack commences , if it is not happening already .
• The ransomware attacks have discovered casinos . These ever-more-sophisticated ransomware attacks are specifically targeting your backup data and administrator functions to disable the ability to restart the organization .
• Your gaming operation , once protected by obscurity , faces the growing threat of increasingly sophisticated ransomware , with successful attacks being launched by criminals against gaming organizations from around the world .
• Ransomware is a part of a broader cyberattack that could involve compromising your key personal , critical systems and administrative functions .
• Ensure your property is ready to run in a protected cocoon . Land-based properties have one major advantage in that you can run unconnected from the internet . Have a process in place to do this and practice this isolation plan .
Fighting Cyber Crime
Taking precaution and having active defenses against ransomware attackers is an absolutely necessary element of a secure gaming operation in today ’ s world . Even more so , it is necessary to maintain the integrity of the business operation and continuing to earn the trust it requires from its patrons .
Should a casino choose not to take additional cybersecurity measures , you might want to consider whether you are prepared , both personally and professionally , to take on the excruciating hassle of attempting to cope with a cybercriminal . If that somehow seems like a manageable task to anyone , then a substantial amount of your budgeting should be dedicated to purchasing Bitcoin in preparation for paying the ransom of your next attack .
However , keep in mind that the cybercriminal could very well take the untraceable currency and whatever other demands the casino has ceded to without returning whatever casino assets they held ransom . Additionally , ceding to a hacker ’ s demands simply encourages these cybercriminals to further engage in illegal behavior and is generally regarded as a very bad idea by the intelligence community .
Committing to cybersecurity defense , on the other hand , will be a much a more valuable and efficient use of time and resources for your casino .
Andrew Cardno is an established thought leader in visual analytics , with over 21 years of experience in the field . He has led private Ph . D ./ masters research teams in visualization / development for over 15 years , which won Cardno two Smithsonian Laureates and more than 12 innovation awards .
16 Global Gaming Business FEBRUARY 2022