cerrar
cerrar
Su red del mañana
Su red del mañana
Planifique su camino hacia una red más rápida, más segura y más resistente diseñada para las aplicaciones y los usuarios a los que da soporte.
          Descubra Netskope
          Ponte manos a la obra con la plataforma Netskope
          Esta es su oportunidad de experimentar de primera mano la Netskope One plataforma de una sola nube. Regístrese para participar en laboratorios prácticos a su propio ritmo, únase a nosotros para una demostración mensual del producto en vivo, realice una prueba de manejo gratuita de Netskope Private Accesso únase a nosotros para talleres en vivo dirigidos por instructores.
            Líder en SSE. Ahora es líder en SASE de un solo proveedor.
            Líder en SSE. Ahora es líder en SASE de un solo proveedor.
            Netskope debuta como Líder en el Cuadrante Mágico™ de Gartner® para Single-Vendor SASE
              Protección de la IA generativa para principiantes
              Protección de la IA generativa para principiantes
              Descubra cómo su organización puede equilibrar el potencial innovador de la IA generativa con sólidas prácticas de seguridad de Datos.
                Prevención de pérdida de datos (DLP) moderna para dummies eBook
                Prevención moderna de pérdida de datos (DLP) para Dummies
                Obtenga consejos y trucos para la transición a una DLP entregada en la nube.
                  Libro SD-WAN moderno para principiantes de SASE
                  SD-WAN moderna para maniquíes SASE
                  Deje de ponerse al día con su arquitectura de red
                    Entendiendo dónde está el riesgo
                    Advanced Analytics transforma la forma en que los equipos de operaciones de seguridad aplican los conocimientos basados en datos para implementar una mejor política. Con Advanced Analytics, puede identificar tendencias, concentrarse en las áreas de preocupación y usar los datos para tomar medidas.
                        Los 6 casos de uso más convincentes para el reemplazo completo de VPN heredada
                        Los 6 casos de uso más convincentes para el reemplazo completo de VPN heredada
                        Netskope One Private Access es la única solución que le permite retirar su VPN para siempre.
                          Colgate-Palmolive Salvaguarda su "Propiedad Intelectual" con Protección de Datos Inteligente y Adaptable
                          Colgate-Palmolive Salvaguarda su "Propiedad Intelectual" con Protección de Datos Inteligente y Adaptable
                            Netskope GovCloud
                            Netskope logra la alta autorización FedRAMP
                            Elija Netskope GovCloud para acelerar la transformación de su agencia.
                              Hagamos grandes cosas juntos
                              La estrategia de venta centrada en el partner de Netskope permite a nuestros canales maximizar su expansión y rentabilidad y, al mismo tiempo, transformar la seguridad de su empresa.
                                Soluciones Netskope
                                Netskope Cloud Exchange
                                Netskope Cloud Exchange (CE) proporciona a los clientes potentes herramientas de integración para aprovechar las inversiones en su postura de seguridad.
                                  Soporte técnico Netskope
                                  Soporte técnico Netskope
                                  Nuestros ingenieros de soporte cualificados ubicados en todo el mundo y con distintos ámbitos de conocimiento sobre seguridad en la nube, redes, virtualización, entrega de contenidos y desarrollo de software, garantizan una asistencia técnica de calidad en todo momento
                                    Vídeo de Netskope
                                    Netskope Training
                                    La formación de Netskope le ayudará a convertirse en un experto en seguridad en la nube. Estamos aquí para ayudarle a proteger su proceso de transformación digital y aprovechar al máximo sus aplicaciones cloud, web y privadas.

                                      How to get the most out of public cloud and avoid configuration security data compromises

                                      Aug 23 2018
                                      Tags
                                      Cloud DLP
                                      cryptominers
                                      Data Loss Prevention
                                      DLP
                                      IaaS
                                      public cloud

                                      How to get the most out of public cloud

                                      Very few would dispute the notion that the public cloud, also known as infrastructure as a service (IaaS) platforms, have provided IT with a hugely powerful way to deploy services in a time- and cost-efficient manner. But the tremendous flexibility and power that public cloud provides has to be balanced against the need to configure services in a secure manner.

                                      The challenges of managing in the cloud era are inextricably bound up with the positives. Public cloud platforms are growing between 200% and 300% depending on whether you talk to Google or Amazon. In 2017,  AWS alone was responsible for almost $17.5bn in revenue, and Jeff Bezos has said that AWS could eventually be worth even more than Amazon’s enormous retail business. The target for Google Cloud Platform in 2018, is approximately $15bn.

                                      But the assumption that using a cloud from one of the mega-providers such as Amazon, Microsoft or Google will inherently mean data is safeguarded is a common misconception that can be hugely damaging to data security. Today, with so many compromises having occurred in the public cloud there can be no excuses. It’s time for IT to get serious about cloud threats and to take control.

                                      The public cloud configuration challenge in context

                                      Of course, poorly managed public cloud is just one example of cloud security threats (despite quite common as shown by a recent study according to which 20% of public S3 buckets are
                                      writable). The convenience and affordability of getting started on the cloud has meant that there has long been a gung-ho element about the way services are deployed. This is similar to what happens with  ‘shadow IT’ where users bypass IT and procurement to download convenient services such as large file transfer utilities or tools for converting PDFs and other file formats. While undoubtedly useful, these services often have terms and conditions that can compromise enterprise data and lead to loss of data ownership.

                                      Shadow IT has its equivalent on public cloud platforms where relatively tech-savvy users in parts of the business can spin up their own instances. But even where IT is involved, stories of poor configuration handling leading to security threats are legion and their fallout has affected many enterprises, including leading global brands. That aforementioned misunderstanding of the shared responsibility model is partly to blame but it’s clear that the user organisation needs to think long and hard about how they handle cloud configurations. These configuration issues can be many and various but they often include issues relating to access permissions, guessable folder structures, leaked credentials and access tokens, services being made public for testing and then forgotten about, and an absence of logging.

                                      What’s needed is to keep the convenience of being able to spin up cloud instances without the risks of exposing data through configuration issues, or also without the risk of leaving the cloud instances themselves exposed to the most common intrusion techniques including:

                                      • The exploitation of misconfigurations or vulnerabilities running on cloud services to steal data or implant malware like cryptominers
                                      • The Brute-forcing of weak passwords for public facing services
                                      • The hunt for publicly accessible IaaS resources like S3 buckets

                                      Only a complete approach allows to mitigate these risks: continuous security assessment allows to constantly scan for issues and display vulnerabilities in the dashboard, shining a light on risky configs and hence reducing the surface exploitable by the attackers. Similarly, avoiding the risk of exposing data in cloud applications is one of the strengths of cloud-native Data Loss Prevention few people think about. Last but not least, detecting and remediating cloud malware in real time plays an important role as well.

                                      But you won’t find those abilities in the suites of the traditional on-premise security vendors that focus purely on the behind-the-firewall world. That means you need to look at a cloud-native approach to get the benefits of DLP, threat protection, and detection of risky configuration settings that could pose a risk for the organization.

                                      Public cloud platforms are extremely powerful additions to any organisation’s infrastructure capacity but they remain relatively new and manageability isn’t always in the ‘best practice’ spectrum. So be aware of the challenges and make sure that any errors are caught quickly and remediated.

                                      If you’d like to get more advice on how you can get the most out of your public cloud platform then please get in touch with us via [email protected].

                                      ¡Mantente informado!

                                      Suscríbase para recibir lo último del blog de Netskope