SASE Week 2023 bajo demanda! Explorar sesiones.

  • Servicio de seguridad Productos Edge

    Protéjase contra las amenazas avanzadas y en la nube y salvaguarde los datos en todos los vectores.

  • Borderless SD-WAN

    Proporcione con confianza un acceso seguro y de alto rendimiento a cada usuario remoto, dispositivo, sitio y nube.

La plataforma del futuro es Netskope

Intelligent Security Service Edge (SSE), Cloud Access Security Broker (CASB), Cloud Firewall, Next Generation Secure Web Gateway (SWG) y Private Access for ZTNA integrados de forma nativa en una única solución para ayudar a todas las empresas en su camino hacia el Servicio de acceso seguro Arquitectura perimetral (SASE).

Todos los productos
Vídeo de Netskope
Next Gen SASE Branch es híbrida: conectada, segura y automatizada

Netskope Next Gen SASE Branch converge Context-Aware SASE Fabric, Zero-Trust Hybrid Security y SkopeAI-Powered Cloud Orchestrator en una oferta de nube unificada, marcando el comienzo de una experiencia de sucursal completamente modernizada para la empresa sin fronteras.

Obtenga más información sobre Next Gen SASE Branch
People at the open space office
Adopte una arquitectura de borde de servicio de acceso seguro (SASE)

Netskope NewEdge es la nube privada de seguridad más grande y de mayor rendimiento del mundo y ofrece a los clientes una cobertura de servicio, un rendimiento y una resiliencia incomparables.

Más información sobre NewEdge
NewEdge
Tu red del mañana

Planifique su camino hacia una red más rápida, más segura y más resistente diseñada para las aplicaciones y los usuarios a los que da soporte.

Obtenga el whitepaper
Tu red del mañana
Netskope Cloud Exchange

Cloud Exchange (CE) de Netskope ofrece a sus clientes herramientas de integración eficaces para que saquen partido a su inversión en estrategias de seguridad.

Más información sobre Cloud Exchange
Vídeo de Netskope
Cambie a los servicios de seguridad en la nube líderes del mercado con una latencia mínima y una alta fiabilidad.

Más información sobre NewEdge
Lighted highway through mountainside switchbacks
Habilite de forma segura el uso de aplicaciones de IA generativa con control de acceso a aplicaciones, capacitación de usuarios en tiempo real y la mejor protección de datos de su clase.

Descubra cómo aseguramos el uso generativo de IA
Habilite de forma segura ChatGPT y IA generativa
Soluciones de confianza cero para implementaciones de SSE y SASE

Más información sobre Confianza Cero
Boat driving through open sea
Netskope hace posible un proceso seguro, rápido y con inteligencia cloud para la adopción de los servicios en la nube, las aplicaciones y la infraestructura de nube pública.

Más información sobre soluciones industriales
Wind turbines along cliffside
  • Recursos

    Obtenga más información sobre cómo Netskope puede ayudarle a proteger su viaje hacia la nube.

  • Blog

    Descubra cómo Netskope permite la transformación de la seguridad y las redes a través del servicio de seguridad (SSE).

  • Eventos & Workshops

    Manténgase a la vanguardia de las últimas tendencias de seguridad y conéctese con sus pares.

  • Seguridad definida

    Todo lo que necesitas saber en nuestra enciclopedia de ciberseguridad.

Podcast Security Visionaries

Predicciones 2024
La presentadora Emily Wearmouth se sienta a conversar con Sherron Burgess, vicepresidente sénior y CISO de BCD Travel, y Shamla Naidoo, directora de estrategia e innovación en la nube de Netskope, para hablar sobre los temas candentes que verán durante el próximo año.

Reproducir el pódcast
Predicciones 2024
Últimos blogs

Cómo Netskope puede habilitar el viaje de Zero Trust y SASE a través de las capacidades del borde del servicio de seguridad (SSE).

Lea el blog
Sunrise and cloudy sky
SASE Week 2023: ¡Su viaje SASE comienza ahora!

Sesiones de repetición de la cuarta SASE Week.

Explorar sesiones
SASE Week 2023
¿Qué es Security Service Edge (SSE)?

Explore el lado de la seguridad de SASE, el futuro de la red y la protección en la nube.

Más información sobre el servicio de seguridad perimetral
Four-way roundabout
  • Nuestros clientes

    Netskope da servicio a más de 2.000 clientes en todo el mundo, entre los que se encuentran más de 25 de las 100 empresas de Fortune

  • Soluciones para clientes

    Le apoyamos en cada paso del camino, garantizando su éxito con Netskope.

  • Comunidad de Netskope

    Aprenda de otros profesionales de redes, datos y seguridad.

  • Formación y certificación

    La formación de Netskope le ayudará a convertirse en un experto en seguridad en la nube.

Ayudamos a nuestros clientes a estar preparados para cualquier situación

Ver nuestros clientes
Woman smiling with glasses looking out window
El talentoso y experimentado equipo de servicios profesionales de Netskope proporciona un enfoque prescriptivo para su exitosa implementación.

Más información sobre servicios profesionales
Servicios profesionales de Netskope
La comunidad de Netskope puede ayudarlo a usted y a su equipo a obtener más valor de los productos y las prácticas.

Acceder a la Netskope Community
La comunidad de Netskope
Asegure su viaje de transformación digital y aproveche al máximo sus aplicaciones en la nube, web y privadas con la capacitación de Netskope.

Infórmese sobre Capacitaciones y Certificaciones
Group of young professionals working
  • Empresa

    Le ayudamos a mantenerse a la vanguardia de los desafíos de seguridad de la nube, los datos y la red.

  • Por qué Netskope

    La transformación de la nube y el trabajo desde cualquier lugar han cambiado la forma en que debe funcionar la seguridad.

  • Liderazgo

    Nuestro equipo de liderazgo está firmemente comprometido a hacer todo lo necesario para que nuestros clientes tengan éxito.

  • Partners

    Nos asociamos con líderes en seguridad para ayudarlo a asegurar su viaje a la nube.

Apoyar la sostenibilidad a través de la seguridad de los datos

Netskope se enorgullece de participar en Vision 2045: una iniciativa destinada a crear conciencia sobre el papel de la industria privada en la sostenibilidad.

Descubra más
Apoyando la sustentabilidad a través de la seguridad de los datos
La más Alta en Ejecución. Más Avanzada en Visión.

Netskope ha sido reconocido como Líder en el Gartner® Magic Quadrant™ de 2023 en SSE.

Obtenga el informe
Netskope ha sido reconocido como Líder en el Gartner® Magic Quadrant™ de 2023 en SSE.
Pensadores, constructores, soñadores, innovadores. Juntos, ofrecemos soluciones de seguridad en la nube de vanguardia para ayudar a nuestros clientes a proteger sus datos y usuarios.

Conozca a nuestro equipo
Group of hikers scaling a snowy mountain
La estrategia de venta centrada en el partner de Netskope permite a nuestros canales maximizar su expansión y rentabilidad y, al mismo tiempo, transformar la seguridad de su empresa.

Más información sobre los socios de Netskope
Group of diverse young professionals smiling

Cloud and Threat Report (Informe sobre la nube y las amenazas): «Shadow IT» en la nube

Feb 24 2021

Resumen

The number of cloud apps being used in the enterprise increased by 20% in 2020, when the COVID-19 pandemic caused a sudden and dramatic shift to remote work for knowledge workers worldwide. Individuals, teams, and organizations all turned to cloud apps to help address some of the new challenges of remote work. The increase in the number of cloud apps was led by an increase in consumer and collaboration apps, the fasting spreading of which included Discord, Zoom, Lumin PDF, and…Xbox LIVE? That’s right, the shift to remote work led to the rapid adoption of new apps to enable remote work and a blurring of lines between work and home that included an increase in personal use of managed devices.  

This blog post accompanies the release of our February 2021 Cloud and Threat Report, which analyzes 2020’s most interesting trends in enterprise cloud and web security. In addition to highlighting the increase in cloud app usage, the Cloud Threat Report also highlights four other noteworthy trends from 2020:

  • El malware entregado desde la nube sigue aumentando, representando ahora el 61% de todo el malware.
  • Malicious Office documents increased dramatically, now representing 27% of all malware downloads.
  • El phishing en la nube sigue aumentando, con un 13% de las campañas de phishing alojadas en la nube y un 33% dirigidas a las credenciales de las aplicaciones en la nube.
  • El uso de aplicaciones personales en la empresa sigue aumentando, con un 83% de usuarios que acceden a aplicaciones personales desde dispositivos gestionados.

Update Feb 28, 2021 Netskope calculates its CCI ratings based on publicly available information and questionnaire responses from app vendors. This article originally mentioned iLovePDF had a “Poor” CCI rating. Thanks to new information that has been made available to Netskope, the iLovePDF CCI rating has increased.

Cloud apps increase

Netskope is deployed inline for millions of managed devices worldwide, with our secure web gateway monitoring cloud and web activity to secure our customers and their data. Netskope Threat Labs leverages anonymized usage data collected from the Netskope Security Cloud platform to gain visibility into cloud app usage on managed devices. Each month, we count the total number of distinct cloud apps in use in each organization and compute the average across all organizations of similar size, using the following bins:

  • Small organizations with <500 users
  • Medium organizations with 500 – 2000 users
  • Large organizations with 2000 – 4000 users
  • X-Large organizations with >4000 users

The number of apps increases with organization size, with the smallest organizations averaging 258 apps and the largest organizations averaging 1,265 apps in December 2020.

Graph showing number of cloud apps by organization size

The number of apps also tends to increase over time, as new apps are regularly introduced into the market and gain popularity among enterprise users. However, in 2020 we observed faster than usual growth, with the number of apps increasing by 20%. The following shows the monthly trend for medium-sized organizations throughout the year, starting at 535 apps and spiking to 733 in October before ending the year at 644.

Graph showing number of cloud apps for medium-seized organizations

There were four months when the average number of cloud apps was actually lower than the previous month, and we ended the year nearly 100 apps below the peak. Why the monthly fluctuations? These are driven primarily by one-off app usage by individual users. For example, a user might turn to an online PDF editor in a pinch, but that app isn’t part of their normal workflow or commonly used in the organization. Across an organization, these one-offs add up and lead to short-term fluctuations.

2020 ended with users in medium-sized organizations using 109 more apps on average than when it started. What types of apps drove this overall growth? In total, we saw growth in 25 different cloud app categories. In most categories, the gains were modest, averaging between 1 and 5 new apps. However, there were two categories that stood out, collaboration apps and consumer apps, together accounting for 30% of the overall increase. We attribute both of these increases to the COVID-19 pandemic and sudden shift to remote work. The increase in collaboration apps was driven by a now mostly remote workforce’s need to stay connected. The increase in consumer apps was driven by that same workforce’s blurring of the lines between work and home, with more managed devices being used for personal reasons. In the next section, we look at some of the fastest spreading apps contributing to the increase.

Fastest-spreading apps

We define “fastest-spreading” as those apps that were adopted by the most new organizations over the course of the year. We do this to identify the apps that contributed most to the growth in the number of apps. For example, Discord is one of the fastest spreading collaboration apps because it was used in 21% of all organizations at the beginning of the year and 48% at the end of the year, a 27 point increase in the number of organizations with Discord users.

Contrast this with a different metric, “fastest-growing.”  We define the “fastest-growing” apps as those apps for which we saw the biggest increase in the number of users. For example, Microsoft Teams was the fastest-growing collaboration app, used by 12% of users at the beginning of the year and 21% of users at the end of the year, a 9 point increase. It is not, however, one of the fastest spreading apps. It was used by 69% of organizations at the beginning of the year and 70% at the end of the year, an increase of only 1 point.

In other words, don’t expect to see many of the big-name enterprise apps in the fastest-spreading list. The fastest-spreading apps will instead be up-and-comers and other apps that just haven’t historically seen much use on managed devices.

Fastest-spreading collaboration apps

The fastest-spreading collaboration apps represented a wide range of functionality. The following list provides some examples of the fastest-spreading collaboration apps and the functionality each of them provides.  

  • Discord – Chat
  • Lumin PDF – PDF editing
  • Monday.com – Project management 
  • Mentimeter – Interactive presentations
  • Miro – Online whiteboarding
  • Zoom – Video conferencing
  • Loom – Video messaging

Most of the fastest-spreading collaboration apps are ostensibly business-related, driven by the COVID-19 pandemic and shift to remote work. Groups seeking to stay connected have turned to these apps to provide a facsimile of the in-person interactions they used to have before the pandemic started. Apps in this class include Mentimeter, Miro, Zoom, and Loom. Others, like Discord, are commonly used for both business and personal reasons. For example, multiple conferences in the past year used Discord as a chat platform, but Discord’s primary user base is gamers. This leads us into the next section about the fastest-spreading consumer apps…

Fastest-spreading consumer apps

Many people who suddenly shifted to remote work saw the lines between work and home begin to blur. This is made evident by the list of the fastest-spreading consumer apps. Many of these are apps that have been popular for a long time but were rarely used on managed devices in the enterprise. This set of apps represents the blurring of lines; managed devices once used primarily for work only are now being used for personal reasons, with gaming, video, and image sharing apps leading the way.

  • Xbox LIVE 
  • LEGO 
  • Dailymotion
  • Hulu
  • Imgur
  • Giphy

A second class of consumer apps was also highly represented in the fastest-spreading consumer apps, online file converters. This represents a different phenomenon. For many organizations, the sudden shift to remote work meant issuing laptops to users who previously used desktops in the office. If those laptops weren’t equipped with the same software, those users sought out alternatives. These apps represent users seeking apps to support their day-to-day work:

  • PDF2Go.com
  • PDF to PNG
  • CloudConvert
  • Smallpdf
  • iLovePDF
  • Pdf2jpg.net

Cloud apps as shadow IT

The growth in cloud apps we saw in 2020 was not an IT-led endeavor. In the examples shared in this blog post, Zoom is most likely to have been part of an IT-led effort. Overall, we found that 97% of the cloud apps in use in the enterprise are not managed by a centralized IT or security function. Instead, these are apps that are freely adopted within business units or by individual end-users. In other words, 97% of the cloud apps in use in the enterprise are cloud shadow IT.  

This becomes problematic when users and business units start uploading sensitive company data to apps that aren’t designed to handle sensitive data. Overall, we found that 47.5% of apps in use in the enterprise have a Cloud Confidence IndexTM (CCI) rating of “Poor,” a rating that Netskope assigns to apps that enterprises that put sensitive data at risk—apps enterprises should avoid using and instead migrate to safer alternatives.

Netskope scores apps based on publicly available information and responses to questionnaires submitted by the app vendors. We score the apps based on multiple dimensions across data protection, certifications, access control, auditability, disaster recovery, business continuity, legal, and privacy. Reasons contributing to an app’s “Poor” rating include:

  • Not having compliance certifications
  • Not having any data center certifications
  • Not encrypting data at rest
  • Not having any disaster recovery support
  • Not having offsite backups
  • Not allowing customer-managed encryption keys
  • Claiming ownership of user-uploaded data

Among the “Poor” apps to which we saw the most data uploaded from managed devices were personal email providers and online file editing services, including:

  1. Correo Yahoo
  2. PDF to PNG
  3. PDF2Go.com
  4. AOL Mail

At the other end of the spectrum, a combined 22% of all apps used in the enterprise have a “High” or “Excellent” rating, indicating that they are ready for enterprise use. 

Pie chart showing apps by CCI rating

Addressing the issues

Cloud traffic now represents 53% of web gateway sessions driven by app adoption. The Netskope Cloud Security platform working with integrated identity service provider solutions can provide the following to address app security issues:

  • Provisioning with AD and SCIM to share users and groups with Netskope
  • Monitoring to define and track federated identities where Netskope can extend SSO/MFA to over 28,000 apps and cloud services with CCI ratings     
  • Policy-driven actions to request step-up authentication based on content and context
  • Enforcement to place users into a high-risk group based activity/events until investigated
  • Extend SSO/MFA across SASE architecture including Netskope Private Access (ZTNA) for private apps

Data analysis

El análisis que se presenta en este artículo de blog se basa en datos anonimizados recogidos por la plataforma Netskope Security Cloud en relación con un subconjunto de clientes de Netskope con autorización previa.

Conclusión

The number of cloud apps in use in the enterprise increased by 20% in 2020, led by collaboration apps (to stay connected to their coworkers) and consumer apps (to unwind and to fill gaps in tooling). 97% of apps in use in the enterprise are shadow IT, apps freely adopted by end-users and business units. This becomes problematic when apps with a “Poor” CCI rating—nearly half of all apps—are used to process sensitive data, putting that data at risk. Read more in our February 2021 Cloud and Threat Report.

author image
Ray Canzanese
Ray es el director de Netskope Threat Labs, que se especializa en la investigación de amenazas centradas en la nube. Su experiencia se centra en el software anti-sabotaje, la detección y clasificación de malware, la seguridad en la nube, la detección secuencial y el aprendizaje automático.

Stay informed!

Subscribe for the latest from the Netskope Blog