¡Únase a nosotros en SASE Summit de Netskope, llegando a una ciudad cerca de usted! Regístrese ahora

  • Servicio de seguridad Productos Edge

    Protéjase contra las amenazas avanzadas y en la nube y salvaguarde los datos en todos los vectores.

  • Borderless SD-WAN

    Proporcione con confianza un acceso seguro y de alto rendimiento a cada usuario remoto, dispositivo, sitio y nube.

  • Plataforma

    Visibilidad inigualable y protección contra amenazas y datos en tiempo real en la nube privada de seguridad más grande del mundo.

La plataforma del futuro es Netskope

Intelligent Security Service Edge (SSE), Cloud Access Security Broker (CASB), Cloud Firewall, Next Generation Secure Web Gateway (SWG) y Private Access for ZTNA integrados de forma nativa en una única solución para ayudar a todas las empresas en su camino hacia el Servicio de acceso seguro Arquitectura perimetral (SASE).

Todos los productos
Vídeo de Netskope
Borderless SD-WAN: el comienzo de la nueva era de la empresa sin fronteras

Netskope Borderless SD-WAN offers an architecture that converges zero trust principles and assured application performance to provide unprecedented secure, high-performance connectivity for every site, cloud, remote user, and IoT device.

Read the article
Borderless SD-WAN
Netskope ofrece una estrategia de seguridad cloud moderna, con capacidades unificadas para los datos y protección frente a amenazas, además de un acceso privado seguro.

Explora nuestra plataforma
Vista aérea de una ciudad metropolitana
Cambie a los servicios de seguridad en la nube líderes del mercado con una latencia mínima y una alta fiabilidad.

Más información sobre NewEdge
Lighted highway through mountainside switchbacks
Habilite de forma segura el uso de aplicaciones de IA generativa con control de acceso a aplicaciones, capacitación de usuarios en tiempo real y la mejor protección de datos de su clase.

Descubra cómo aseguramos el uso generativo de IA
Safely Enable ChatGPT and Generative AI
Soluciones de confianza cero para implementaciones de SSE y SASE

Learn about Zero Trust
Boat driving through open sea
Netskope hace posible un proceso seguro, rápido y con inteligencia cloud para la adopción de los servicios en la nube, las aplicaciones y la infraestructura de nube pública.

Learn about Industry Solutions
Wind turbines along cliffside
  • Nuestros clientes

    Netskope da servicio a más de 2.000 clientes en todo el mundo, entre los que se encuentran más de 25 de las 100 empresas de Fortune

  • Soluciones para clientes

    Le apoyamos en cada paso del camino, garantizando su éxito con Netskope.

  • Formación y certificación

    La formación de Netskope le ayudará a convertirse en un experto en seguridad en la nube.

Ayudamos a nuestros clientes a estar preparados para cualquier situación

Ver nuestros clientes
Woman smiling with glasses looking out window
El talentoso y experimentado equipo de servicios profesionales de Netskope proporciona un enfoque prescriptivo para su exitosa implementación.

Learn about Professional Services
Servicios profesionales de Netskope
Asegure su viaje de transformación digital y aproveche al máximo sus aplicaciones en la nube, web y privadas con la capacitación de Netskope.

Learn about Training and Certifications
Group of young professionals working
  • Recursos

    Obtenga más información sobre cómo Netskope puede ayudarle a proteger su viaje hacia la nube.

  • Blog

    Descubra cómo Netskope permite la transformación de la seguridad y las redes a través del servicio de seguridad (SSE).

  • Eventos & Workshops

    Manténgase a la vanguardia de las últimas tendencias de seguridad y conéctese con sus pares.

  • Seguridad definida

    Todo lo que necesitas saber en nuestra enciclopedia de ciberseguridad.

Podcast Security Visionaries

Episodio de bonificación 2: El cuadrante mágico para SSE y obtener SASE correctamente
Mike y Steve analizan el Gartner® Magic Quadrant™ para Security Service Edge (SSE), el posicionamiento de Netskope y cómo el clima económico actual afectará el viaje de SASE.

Reproducir el pódcast
Episodio de bonificación 2: El cuadrante mágico para SSE y obtener SASE correctamente
Últimos blogs

Cómo Netskope puede habilitar el viaje de Zero Trust y SASE a través de las capacidades del borde del servicio de seguridad (SSE).

Lea el blog
Sunrise and cloudy sky
Gira mundial del día de inmersión en AWS de Netskope 2023

Netskope ha desarrollado una variedad de laboratorios prácticos, talleres, seminarios web detallados y demostraciones para educar y ayudar a los clientes de AWS en el uso y la implementación de los productos de Netskope.

Learn about AWS Immersion Day
Socio de AWS
¿Qué es Security Service Edge (SSE)?

Explore el lado de la seguridad de SASE, el futuro de la red y la protección en la nube.

Learn about Security Service Edge
Four-way roundabout
  • Empresa

    Le ayudamos a mantenerse a la vanguardia de los desafíos de seguridad de la nube, los datos y la red.

  • Por qué Netskope

    La transformación de la nube y el trabajo desde cualquier lugar han cambiado la forma en que debe funcionar la seguridad.

  • Liderazgo

    Nuestro equipo de liderazgo está firmemente comprometido a hacer todo lo necesario para que nuestros clientes tengan éxito.

  • Partners

    Nos asociamos con líderes en seguridad para ayudarlo a asegurar su viaje a la nube.

Apoyar la sostenibilidad a través de la seguridad de los datos

Netskope se enorgullece de participar en Vision 2045: una iniciativa destinada a crear conciencia sobre el papel de la industria privada en la sostenibilidad.

Descubra más
Supporting Sustainability Through Data Security
La más Alta en Ejecución. Más Avanzada en Visión.

Netskope ha sido reconocido como Líder en el Gartner® Magic Quadrant™ de 2023 en SSE.

Obtenga el informe
Netskope ha sido reconocido como Líder en el Gartner® Magic Quadrant™ de 2023 en SSE.
Pensadores, constructores, soñadores, innovadores. Juntos, ofrecemos soluciones de seguridad en la nube de vanguardia para ayudar a nuestros clientes a proteger sus datos y usuarios.

Conozca a nuestro equipo
Group of hikers scaling a snowy mountain
La estrategia de venta centrada en el partner de Netskope permite a nuestros canales maximizar su expansión y rentabilidad y, al mismo tiempo, transformar la seguridad de su empresa.

Learn about Netskope Partners
Group of diverse young professionals smiling

Cloud and Threat Report (Informe sobre la nube y las amenazas): «Shadow IT» en la nube

Feb 24 2021

Resumen

The number of cloud apps being used in the enterprise increased by 20% in 2020, when the COVID-19 pandemic caused a sudden and dramatic shift to remote work for knowledge workers worldwide. Individuals, teams, and organizations all turned to cloud apps to help address some of the new challenges of remote work. The increase in the number of cloud apps was led by an increase in consumer and collaboration apps, the fasting spreading of which included Discord, Zoom, Lumin PDF, and…Xbox LIVE? That’s right, the shift to remote work led to the rapid adoption of new apps to enable remote work and a blurring of lines between work and home that included an increase in personal use of managed devices.  

This blog post accompanies the release of our February 2021 Cloud and Threat Report, which analyzes 2020’s most interesting trends in enterprise cloud and web security. In addition to highlighting the increase in cloud app usage, the Cloud Threat Report also highlights four other noteworthy trends from 2020:

  • El malware entregado desde la nube sigue aumentando, representando ahora el 61% de todo el malware.
  • Malicious Office documents increased dramatically, now representing 27% of all malware downloads.
  • El phishing en la nube sigue aumentando, con un 13% de las campañas de phishing alojadas en la nube y un 33% dirigidas a las credenciales de las aplicaciones en la nube.
  • El uso de aplicaciones personales en la empresa sigue aumentando, con un 83% de usuarios que acceden a aplicaciones personales desde dispositivos gestionados.

Update Feb 28, 2021 Netskope calculates its CCI ratings based on publicly available information and questionnaire responses from app vendors. This article originally mentioned iLovePDF had a “Poor” CCI rating. Thanks to new information that has been made available to Netskope, the iLovePDF CCI rating has increased.

Cloud apps increase

Netskope is deployed inline for millions of managed devices worldwide, with our secure web gateway monitoring cloud and web activity to secure our customers and their data. Netskope Threat Labs leverages anonymized usage data collected from the Netskope Security Cloud platform to gain visibility into cloud app usage on managed devices. Each month, we count the total number of distinct cloud apps in use in each organization and compute the average across all organizations of similar size, using the following bins:

  • Small organizations with <500 users
  • Medium organizations with 500 – 2000 users
  • Large organizations with 2000 – 4000 users
  • X-Large organizations with >4000 users

The number of apps increases with organization size, with the smallest organizations averaging 258 apps and the largest organizations averaging 1,265 apps in December 2020.

Graph showing number of cloud apps by organization size

The number of apps also tends to increase over time, as new apps are regularly introduced into the market and gain popularity among enterprise users. However, in 2020 we observed faster than usual growth, with the number of apps increasing by 20%. The following shows the monthly trend for medium-sized organizations throughout the year, starting at 535 apps and spiking to 733 in October before ending the year at 644.

Graph showing number of cloud apps for medium-seized organizations

There were four months when the average number of cloud apps was actually lower than the previous month, and we ended the year nearly 100 apps below the peak. Why the monthly fluctuations? These are driven primarily by one-off app usage by individual users. For example, a user might turn to an online PDF editor in a pinch, but that app isn’t part of their normal workflow or commonly used in the organization. Across an organization, these one-offs add up and lead to short-term fluctuations.

2020 ended with users in medium-sized organizations using 109 more apps on average than when it started. What types of apps drove this overall growth? In total, we saw growth in 25 different cloud app categories. In most categories, the gains were modest, averaging between 1 and 5 new apps. However, there were two categories that stood out, collaboration apps and consumer apps, together accounting for 30% of the overall increase. We attribute both of these increases to the COVID-19 pandemic and sudden shift to remote work. The increase in collaboration apps was driven by a now mostly remote workforce’s need to stay connected. The increase in consumer apps was driven by that same workforce’s blurring of the lines between work and home, with more managed devices being used for personal reasons. In the next section, we look at some of the fastest spreading apps contributing to the increase.

Fastest-spreading apps

We define “fastest-spreading” as those apps that were adopted by the most new organizations over the course of the year. We do this to identify the apps that contributed most to the growth in the number of apps. For example, Discord is one of the fastest spreading collaboration apps because it was used in 21% of all organizations at the beginning of the year and 48% at the end of the year, a 27 point increase in the number of organizations with Discord users.

Contrast this with a different metric, “fastest-growing.”  We define the “fastest-growing” apps as those apps for which we saw the biggest increase in the number of users. For example, Microsoft Teams was the fastest-growing collaboration app, used by 12% of users at the beginning of the year and 21% of users at the end of the year, a 9 point increase. It is not, however, one of the fastest spreading apps. It was used by 69% of organizations at the beginning of the year and 70% at the end of the year, an increase of only 1 point.

In other words, don’t expect to see many of the big-name enterprise apps in the fastest-spreading list. The fastest-spreading apps will instead be up-and-comers and other apps that just haven’t historically seen much use on managed devices.

Fastest-spreading collaboration apps

The fastest-spreading collaboration apps represented a wide range of functionality. The following list provides some examples of the fastest-spreading collaboration apps and the functionality each of them provides.  

  • Discord – Chat
  • Lumin PDF – PDF editing
  • Monday.com – Project management 
  • Mentimeter – Interactive presentations
  • Miro – Online whiteboarding
  • Zoom – Video conferencing
  • Loom – Video messaging

Most of the fastest-spreading collaboration apps are ostensibly business-related, driven by the COVID-19 pandemic and shift to remote work. Groups seeking to stay connected have turned to these apps to provide a facsimile of the in-person interactions they used to have before the pandemic started. Apps in this class include Mentimeter, Miro, Zoom, and Loom. Others, like Discord, are commonly used for both business and personal reasons. For example, multiple conferences in the past year used Discord as a chat platform, but Discord’s primary user base is gamers. This leads us into the next section about the fastest-spreading consumer apps…

Fastest-spreading consumer apps

Many people who suddenly shifted to remote work saw the lines between work and home begin to blur. This is made evident by the list of the fastest-spreading consumer apps. Many of these are apps that have been popular for a long time but were rarely used on managed devices in the enterprise. This set of apps represents the blurring of lines; managed devices once used primarily for work only are now being used for personal reasons, with gaming, video, and image sharing apps leading the way.

  • Xbox LIVE 
  • LEGO 
  • Dailymotion
  • Hulu
  • Imgur
  • Giphy

A second class of consumer apps was also highly represented in the fastest-spreading consumer apps, online file converters. This represents a different phenomenon. For many organizations, the sudden shift to remote work meant issuing laptops to users who previously used desktops in the office. If those laptops weren’t equipped with the same software, those users sought out alternatives. These apps represent users seeking apps to support their day-to-day work:

  • PDF2Go.com
  • PDF to PNG
  • CloudConvert
  • Smallpdf
  • iLovePDF
  • Pdf2jpg.net

Cloud apps as shadow IT

The growth in cloud apps we saw in 2020 was not an IT-led endeavor. In the examples shared in this blog post, Zoom is most likely to have been part of an IT-led effort. Overall, we found that 97% of the cloud apps in use in the enterprise are not managed by a centralized IT or security function. Instead, these are apps that are freely adopted within business units or by individual end-users. In other words, 97% of the cloud apps in use in the enterprise are cloud shadow IT.  

This becomes problematic when users and business units start uploading sensitive company data to apps that aren’t designed to handle sensitive data. Overall, we found that 47.5% of apps in use in the enterprise have a Cloud Confidence IndexTM (CCI) rating of “Poor,” a rating that Netskope assigns to apps that enterprises that put sensitive data at risk—apps enterprises should avoid using and instead migrate to safer alternatives.

Netskope scores apps based on publicly available information and responses to questionnaires submitted by the app vendors. We score the apps based on multiple dimensions across data protection, certifications, access control, auditability, disaster recovery, business continuity, legal, and privacy. Reasons contributing to an app’s “Poor” rating include:

  • Not having compliance certifications
  • Not having any data center certifications
  • Not encrypting data at rest
  • Not having any disaster recovery support
  • Not having offsite backups
  • Not allowing customer-managed encryption keys
  • Claiming ownership of user-uploaded data

Among the “Poor” apps to which we saw the most data uploaded from managed devices were personal email providers and online file editing services, including:

  1. Yahoo Mail
  2. PDF to PNG
  3. PDF2Go.com
  4. AOL Mail

At the other end of the spectrum, a combined 22% of all apps used in the enterprise have a “High” or “Excellent” rating, indicating that they are ready for enterprise use. 

Pie chart showing apps by CCI rating

Addressing the issues

Cloud traffic now represents 53% of web gateway sessions driven by app adoption. The Netskope Cloud Security platform working with integrated identity service provider solutions can provide the following to address app security issues:

  • Provisioning with AD and SCIM to share users and groups with Netskope
  • Monitoring to define and track federated identities where Netskope can extend SSO/MFA to over 28,000 apps and cloud services with CCI ratings     
  • Policy-driven actions to request step-up authentication based on content and context
  • Enforcement to place users into a high-risk group based activity/events until investigated
  • Extend SSO/MFA across SASE architecture including Netskope Private Access (ZTNA) for private apps

Data analysis

El análisis que se presenta en este artículo de blog se basa en datos anonimizados recogidos por la plataforma Netskope Security Cloud en relación con un subconjunto de clientes de Netskope con autorización previa.

Conclusiones

The number of cloud apps in use in the enterprise increased by 20% in 2020, led by collaboration apps (to stay connected to their coworkers) and consumer apps (to unwind and to fill gaps in tooling). 97% of apps in use in the enterprise are shadow IT, apps freely adopted by end-users and business units. This becomes problematic when apps with a “Poor” CCI rating—nearly half of all apps—are used to process sensitive data, putting that data at risk. Read more in our February 2021 Cloud and Threat Report.

author image
Ray Canzanese
Ray es el director de Netskope Threat Labs, que se especializa en la investigación de amenazas centradas en la nube. Su experiencia se centra en el software anti-sabotaje, la detección y clasificación de malware, la seguridad en la nube, la detección secuencial y el aprendizaje automático.