CASB: Securing your cloud applications
•Transferir como PPTX, PDF•
5 gostaram•1,046 visualizações
How do you secure a world where you operate on the internet but don't own the internet?
Recomendados
Mais conteúdo relacionado
Mais procurados
Mais procurados (20)
Semelhante a CASB: Securing your cloud applications
Semelhante a CASB: Securing your cloud applications (20)
Mais de Forcepoint LLC
Mais de Forcepoint LLC (20)
Último
Último (20)
CASB: Securing your cloud applications
- 1. Copyright © 2018 Forcepoint | 1 Securing Your Cloud Applications Managing Risk - Making the Invisible, Visible Joakim (JK) Lialias Sr. Director, Product Marketing, Cloud Security
- 2. Copyright © 2018 Forcepoint | 2 HOW DO YOU SECURE A WORLD WHERE YOU OPERATE ON THE INTERNET BUT DON’T OWN THE INTERNET Internet Your Corporate Network Employees Suppliers Partners Customers
- 3. Copyright © 2018 Forcepoint | 3 THE CONTINUED TRANSITION TO CLOUD PRIVATE CLOUD HYBRID CLOUD PUBLIC CLOUD 85% of customers have a multi-cloud strategy 70% of IT Spend will be cloud based by 2020 40% of enterprises are cloud first
- 4. Copyright © 2018 Forcepoint | 4 THE NEW NORMAL IN NUMBERS… Up to 40% of IT spend is Shadow IT (Unsanctioned) >1,000 SaaSapps used at a typical enterprise company 1/3 of enterprises will experience a successful attack targeting their Shadow IT resources by 2020
- 5. Copyright © 2018 Forcepoint | 5 ARE YOU READY FOR THE NEXT WAVE OF SHADOW IT INNOVATION? Source: chiefmartec.com http://cdn.chiefmartec.com/wp-content/uploads/2016/03/marketing_technology_landscape_2016_3000px.jpg
- 6. Copyright © 2018 Forcepoint | 6 ARE YOU READY FOR THE NEXT WAVE OF CLOUD APPLICATIONS OR YOUR CURRENT STATE?
- 7. Copyright © 2018 Forcepoint | 7 CUSTOMER SECURITY NEEDS AS THEY ADOPT THE CLOUD I need visibility into what my users are doing in the cloud to understand my risks and protect my users I need to be able to monitor and control how my users interact with my critical cloud applications I need security that helps me safely embrace the cloud
- 8. Copyright © 2018 Forcepoint | 8 SO HOW DO CUSTOMERS ACHIEVE BALANCE AND FOCUS? VISIBILITY CONTROL THE ART OF MANAGING RISK: MAKING THE INVISIBLE, VISIBILE CASB solution will help to eliminate security blind spots and control security for cloud applications
- 9. Copyright © 2018 Forcepoint | 9 ELIMINATE SECURITY BLIND SPOTS FOR ANY CLOUD APPS DISCOVERY Insight into what apps are being used by employees ENFORCEMENT Automated threat prevention and context-aware policy enforcement RISK ASSESSMENT Contextual risk of apps, users, and security configurations ACCOUNT TAKE OVER DATA PROTECTION DEVICE ACCESS CONTROL ACCOUNT CONTROL & MONITORING AUDIT OF USER ACTIVITIES FORCEPOINT CASB
- 10. Copyright © 2018 Forcepoint | 10 ▸ Full user activity monitoring ▸ Full blocking and alerting ▸ No API dependency ▸ Quickly add new apps ▸ Quick time to value ▸ No internal politics ▸ Certified by provider ▸ No end user impact Cloud Apps API Cloud Apps Proxy FLEXIBLE CASB DEPLOYMENT OPTIONS - MULTI-MODAL Pros Pros 1. Cloud APIs 2. Cloud Proxy
- 11. Copyright © 2018 Forcepoint | 11 SECURITY USE CASES FOR UNSANCTIONED CLOUD APPS 2. Identify Risky Apps 4. Identify Users in Risk 1. Visibility into Shadow IT 3. Prevent Risky Usage
- 12. Copyright © 2018 Forcepoint | 12 SECURITY USE CASES FOR SANCTIONED CLOUD APPS 1. Prevent Cyber Threats 2. Prevent Data Leakage 3. Control External File Sharing 4. Manage Admins & Privileged Accounts 5. Manage BYOD Access 6. Monitor All User Activity CONTROL
- 13. Copyright © 2018 Forcepoint | 13 CLOUD APP DISCOVERY
- 14. Copyright © 2018 Forcepoint | 14 USER RISK DASHBOARD Delivering a quick view of overall risk posture to accelerate investigation and remediation
- 15. Copyright © 2018 Forcepoint | 15 DETAILED LOG INFORMATION OF INDIVIDUAL USER
- 16. Copyright © 2018 Forcepoint | 16 TIMELINE OF FLAGGED INDIVIDUAL USER RISK ACTIVITIES Drill down to an individual incident to determine what actions to take
- 17. Copyright © 2018 Forcepoint | 17 DIVING DEEPER INTO A SINGLE USER INCIDENT Easy drill down to determine exactly what happened to trigger incident and learn the recommendations that Forcepoint offers to remediate.
- 18. Copyright © 2018 Forcepoint | 18 DATA CLASSIFICATION DASHBOARD (O365 EXAMPLE)
- 19. Copyright © 2018 Forcepoint | 19 ADDING DATA CLASSIFICATION POLICY Easily add policies such as data types to be monitored, filters to be applied, and actions to take when encountering specified data type
- 20. Copyright © 2018 Forcepoint | 20 ASSESSING RISK PROFILE OF DATA Quick view and analysis of sensitive content
- 21. Copyright © 2018 Forcepoint | 21 MODIFYING ACCESS CONTROLS
- 22. Copyright © 2018 Forcepoint | 22 MANAGING ENDPOINT ACCESS The Security Analyst can also set up manual enrollment for devices
- 23. Copyright © 2018 Forcepoint | 23 FORCEPOINT DELIVERY OF CASB FUNCTIONALITY Forcepoint DLP Forcepoint CASB Forcepoint Web Security Forcepoint NGFW
- 24. Copyright © 2018 Forcepoint | 24 EXTENDING CASB FUNCTIONALITY TO WEB SECURITY Integrating Secure Web Gateway and CASB • Visibility and control for unsanctioned cloud applications (version 8.3 and 8.4) • With version 8.5 introducing a module called Cloud Application Control What is the Cloud Application Control Module? • CASB capabilities for Cloud Application traffic as it traverses the Forcepoint Web Security Solution. • Proxy based activity visibility • Anomaly detection + UEBA + Risk analysis • Real-time mitigation options • AD and SIEM integration • Seamless and smooth implementation of CASB with one proxy All CASB supported cloud apps & automatic update of additional applications
- 25. Copyright © 2018 Forcepoint | 25
- 26. Copyright © 2018 Forcepoint | 26 DLP CLOUD APPLICATIONS POWERED BY FORCEPOINT CASB Data in motion AND data discovery Inline & platform native APIs Upload; Download; Sharing Enterprise DLP features: GDPR; Fingerprinting; Machine Learning; Incident Risk Ranking; OCR (8.6); Forcepoint hosted solution 1 2 3 4 5 Supported Applications
- 27. Copyright © 2018 Forcepoint | 27 FOUR CORE DLP USE CASES FOR CLOUD APPLICATIONS 1. Prevent sensitive data being uploaded and stored in authorized cloud applications 2. Prevent sensitive data being shared with unauthorized external parties or employees. 3. Discover (audit) then remediate sensitive data that is stored in authorized cloud applications. 4. Prevent employees or external actors downloading sensitive data to unauthorized devices
- 28. Copyright © 2018 Forcepoint | 28 FORCEPOINT CASB VS DLP 8.5 Forcepoint CASB Security Suite Forcepoint DLP 8.5 (w/ Cloud Applications) Monitor, audit and control access to IT approved cloud applications Monitor, audit and control access to applications not approved by IT Monitor, audit and control access to IaaS infrastructure and in-house cloud applications. Real-time Activity Monitoring & Analytics Provide DLP visibility and control over regulatory compliance data sets (PCI DSS + EU GDPR) Provide DLP visibility and control over IP and regulated data set using data fingerprinting. DLP Incident Risk Ranking to prioritize DLP activity for security operations teams Protect regulated data and IP from data loss across cloud applications; endpoints; web and email traffic.
- 29. Copyright © 2018 Forcepoint | 29 FORCEPOINT ADVANCED MALWARE DETECTION (AMD) ADDS… • Unmatched accuracy that eliminates crippling false positives • Comprehensive and actionable intelligence to optimize remediation efforts for incident response teams • Full system emulation to effectively counter advanced evasions • Shared global threat intelligence that can update other solutions +100% efficacy in advanced malware detection1 Zero false positives when convicting or exonerating advanced malware3 1. NSS Labs 2016 APT Test (Lastline) Seamless integration with CASB, Email, NGFW, and Web Security solutions for a comprehensive defense
- 30. Copyright © 2018 Forcepoint | 30 CUSTOMERS TRUST FORCEPOINT FOR CLOUD APP VISIBILITY AND CONTROL “Forcepoint CASB has given us the visibility and control that we need in order to fully leverage the potential of cloud applications on mobile devices.” Luis Aguiar, Manager – Infrastructure Delivery Team Leader, Metro Bank
- 31. Copyright © 2018 Forcepoint | 31 ELIMINATE SECURITY BLIND SPOTS FOR CLOUD APPLICATIONS • Support for ANY cloud application (IaaS, PaaS, SaaS, or homegrown cloud application) • Discover Shadow IT applications and assess risk • Centrally assess and control users, data, and security policies • Unique real-time behavioral anomalies and user activity monitoring (Cloud UEBA) • Flexibility to add cloud applications by being deployed in both API (offline) and Proxy (inline) • Enforce risk-based multi-factor authentication Forcepoint CASB eliminates security blind spots for cloud applications by following the rhythm of your people and flow of your data DISCOVERY ENFORCEMENT RISK ASSESSMENT
- 32. Copyright © 2018 Forcepoint | 32 READY TO FIND YOUR RISKIEST CLOUD USER? https://www.forcepoint.com/cloud-threat-assessment Register for a FREE Cloud Threat Assessment
Notas do Editor
- The DIGITIAL TRANSFORMATION has changed the IT Landscape In the past, customers had to be primarily concerned about securing their on-premises environment Today, data is stored and used across multiple-cloud providers, with an environment that has made sanctioned and unsanctioned pervasive to the enterprise 85% of enterprises have a multi-cloud strategy, meaning that they have deployments across multiple XaaS architectures, coupled with private-cloud environments mostly deployed on-premises Up to 40% of IT spend is shadow IT - many of these application environments are delivering productivity gains to enterprises, but at what cost? And, an average enterprise company today uses more than 1,000 SaaS applications So the world is much more complicated - however, there are ways to get insight and control into this “new IT world order” where security, innovation and productivity can co-exist.
- “By 2017 the CMO will spend more on IT than the CIO” - Gartner (2012) This is a map of marketing technology “martech” applications that CMO’s are purchasing today. Talk about the impact to GDPR – lack of visibility around cloud supplier relationships.. Slide outcome: it’s impossible to know every app that’s out their, but users have a habit of finding them and using them!! – but they are generally trying to innovate, vs. be malicious.. – IT security needs to support business innovation – uncover shadow IT and bring it back under governance if it’s really required by the business..
- Faced with an increasing number of apps and increasingly sophisticated threats, the humans become the common denominator. Where historically user may have been considered a liability, changing conditions require a new way of thinking about the solution. Forcepoint believes understanding the human behavior at a deep level will help organizations remain secure. How?
- Customers are looking for two important things as they adopt the cloud: Visibility into what their users are doing in the cloud. Users may be using cloud applications that have not been approved or vetted by IT or the security team. The use of these unsanctioned cloud applications can also be referred to as “Shadow IT”, and getting visibility in order to understand risk is key. For the applications that are approved, ie: sanctioned by IT, customers need to be able to monitor and control them in order to protect their users and data
- Discover unsanctioned [Shadow IT] applications and assess risk Centrally assess and control users, data, and security policies Unique real-time behavioral anomalies and user activity monitoring (Cloud UEBA) Extend and support compliance mandates to cloud applications Implement risk-based multi-factor authentication Support for ANY cloud / web application whether API / Inline (proxy)
- We offer flexibility and choice around deployment methods: Cloud APIs: with Cloud API integration, our CASB portal can be set up to leverage the cloud application provider’s APIs in order to interact with the provider in question. This can happen very quickly – with a few clicks you can get going. Forcepoint CASB comes ready to interface with the cloud application provider’s API, out of the box. One thing to note: what you can do with this deployment option depends on the APIs that the cloud application provider makes available for use Cloud Proxy: this means inline – which allows for full monitoring, blocking and alerting. Inline deployment is compatible and coexists with Forcepoint Web Security as well
- These are some of the security use cases you’ll want to satisfy with regards to unsanctioned cloud applications Visibility into Shadow IT: determining whether your users are using cloud applications that you don’t know about and whether or not sensitive company data now resides in these Identify Risky Apps: you’ll want to know whether or not your users are using applications known to be risky / dangerous Prevent Risky Usage: you’ll want to stop users from using these risky / dangerous apps Identify Users in Risk: you’ll want to identify which users are exhibiting behaviors they should not be exhibiting, so that you can correct the issue
- Quick refresher on CASB for those who are new or aren’t real familiar with the space – CASB, or Cloud Access Security Broker (Gartner term) is a category of security products PURPOSE BUILT FOR CLOUD. Designed to sit physically or logically between the cloud apps and the users accessing those cloud apps in order to provide visibility into the use of those cloud apps, and security control. While organizations are in fact, using apps hosted in the cloud more and more, that does not mean they are that they want to outsource their security to the app provider. Importantly, CASB products provide centralized controls for cloud applications
- New chargeable AP-DATA license which will sit alongside: AP-DATA Gateway; AP-DATA Discover and AP-ENDPOINT DLP Extend DLP policies to files stored in Enterprise cloud platforms Deployment in Azure and AWS Integration using cloud native APIs Prioritized scanning of new, edited and shared files Comprehensive range of out-of-the-box remediation actions: Scalable – on-board virtual scanning units without interrupting service provision.
- Forcepoint CASB is widely deployed, and in use by some of the largest organizations across a wide variety of verticals. Customers range across pharma, tech, finance, healthcare, manufacturing, defense, media, internet…while the industries are all different, what they all have in common is they are transitioning their enterprise apps to the cloud – and they are looking for help to secure their users, their data and their apps in the cloud.