CLOUDTWEAKS CONTRIBUTOR PROGRAM

Join the CloudTweaks thought leadership contributor program which includes a customized profile, branded identity page, newsletter marketing, social amplification and more...

The program is currently available to consultants, influencers or executive level contributors.

Nat Kausik

Combatting Malware in the Cloud Requires a New Way of Thinking

Malware in the Cloud

It’s no secret that cloud adoption has exploded in the enterprise over last few years. However, this aggressive cloud adoption trend has also opened the floodgates for a host of new threats and elevated the risk of data being lost or stolen. Perhaps not surprisingly, malware and ransomware in the cloud – longtime challenges for endpoints – top the list of the most prominent threats facing enterprises investing in the cloud. Additionally, with increased reliance on widely used interconnected public cloud apps in the enterprise, malware and ransomware have the potential to touch – and compromise – more data than ever before.

Yet, despite new and increasing risks to data, few providers offer dedicated cloud malware protection. While some cloud apps like G Suite, Office 365, and Azure can identify common malware, such solutions are completely ineffective in combatting zero-day attacks when end-users need instant access to data in the cloud or expect an instant upload of a file.

The lack of proactive cloud malware solutions underscores an industry gap that indicates – among other things – organizations are unprepared and under-equipped to effectively address next-generation AI-based malware. The most dangerous threats aren’t known malware, but the unknown, zero-day attacks that fly under the radar of security defenses and result in weeks or months of data exfiltration – often at a major cost to the targeted organization. Once advanced malware makes its way into a cloud app, there’s little an organization can do to stop its spread. These malicious files are often downloaded to endpoints, make their way to connected apps, and are then shared across the organization.

cloud malware

Here are a few steps organizations can take to solidify malware defenses in the cloud and keep sensitive data from falling into the wrong hands.

Rethink the Security of Enterprise Apps:

G Suite and Office 365 are perhaps the most trusted of any enterprise apps. Unlike random online video content and unfamiliar internet games, enterprise apps are supposed to be functional and secure, and their files are expected to be free of malware. Consequently, most people don’t think twice about downloading corporate documents or attachments. Unfortunately for the end user, cyber criminals will happily capitalize and exploit this trust. Unbeknownst to many, enterprise apps contain the same flaws as any others, and don’t come with built-in security protections. So, there is strong likelihood that they’re hosting malware just like any other app.

Find a Trusted Third Party Endpoint Security Solution:

Major cloud providers such as Salesforce and Box all work with third-party security solutions. Because most cloud platforms don’t come equipped with advanced threat protection, third-party solutions are a must. Not all endpoint security solutions are the same, so it is recommended that you stack up endpoint protection to the best possible standards. Top solutions will catch most malware coming to endpoints, which includes both desktops and laptops. For today’s threats and IT structure, organizations will need a solution that works across applications, as opposed to a solution that only works on one or a few apps.

Stop Malware from Spreading:

One of the ways to protect data from the threat of malware is to prevent it from spreading. Advanced Threat Protection (ATP) technologies allow organizations to detect and block known and unknown malware before it hits the cloud, assess the risks of files, and stop malicious attacks in their tracks.

Implement Dedicated Mobile Device Protection for BYOD:

If you don’t see mobile protection incorporated in lists of enterprises’ endpoint features, there’s a distinct reason: it’s not their bread and butter. Endpoint security does a good job of securing infrastructure and identifying bad files, but falls short when protecting the end users or providing secure access of that file – especially as more users rely on unmanaged personal devices to conduct business functions. Organizations need mobile-specific security solutions that work seamlessly across all apps, provide a frictionless user experience, secure corporate data, and ensure regulatory compliance requirements are met.

Invest in Zero-Day Protection:

As malware becomes increasingly stealthy, sophisticated, and elusive, organizations need to get a few steps ahead of potential attacks with zero-day protection that can address both known and unknown threats. That means steering clear of solutions that protect solely with signature-based technology and block only known threats. On the other hand, next-generation tools combat advanced threats with static analysis, basing a risk decision on hundreds of characteristics associated with a file. They can then identify the threat based on its behaviors, even before it has been found in the wild.

By Nat Kausik, CEO, Bitglass

Nat Kausik

Nat became president and CEO of Bitglass in January 2013. Prior to Bitglass, Nat was CEO of Asterpix, Trubates, FineGround and Arcot Systems. Nat earned a B.Tech from IIT, Madras, an M.S. from Princeton University, and a Ph.D. in computer science from Cornell University.

View Website
The Lighter Side Of The Cloud - Down The Drain
The Lighter Side Of The Cloud - The Cloud Lecture
The Lighter Side Of The Cloud - Dial-up Speeds
The Lighter Side Of The Cloud - Resolutions
The Lighter Side Of The Cloud – Cloud Theory
Mitigating Cyberattacks: The Prevention and Handling

Mitigating Cyberattacks: The Prevention and Handling

Mitigating Cyberattacks New tools and technologies help companies in their drive to improve performance, cut costs and grow their businesses ...
ERP Ain’t Got the Same Soul, I Like that Old Time Rock ‘n’ Roll

ERP Ain’t Got the Same Soul, I Like that Old Time Rock ‘n’ Roll

Designing Enterprise Software around People Looking back, business owners talked to their customers and employees in person or by phone ...
Rainmaking From The Cloud - CIOs Struggle To Keep Pace With IT Demands

Rainmaking From The Cloud – CIOs Struggle To Keep Pace With IT Demands

Rainmaking from the Cloud In the digital era, where customers can select virtually anything with a click of a button, ...
5 Simple Tips to Help Avoid Ransomware

5 Simple Tips to Help Avoid Ransomware

5 Tips to Avoid Ransomware Ransomware is a particularly pernicious form of malware: unsatiated by simply using your system as ...
Cloud Services Are Vulnerable Without End-To-End Encryption

Cloud Services Are Vulnerable Without End-To-End Encryption

End-To-End Encryption The growth of cloud services has been one of the most disruptive phenomena of the Internet era.  However, ...
How artificial intelligence and analytics helps in crime prevention

How artificial intelligence and analytics helps in crime prevention

How Artificial Intelligence Helps Crime Prevention According to a study released by FBI, there is an annual increase of 4.1% ...
The UK Tech Sector: The Gender Gap

The UK Tech Sector: The Gender Gap

The Tech Sector Gender Gap In conversation with Co-Founder and Creative Director of North West Web Design Studio, MadeByShape Andy ...
Data Protection Officers

Free Linux Firewalls of 2018

A firewall is an important aspect of computer security these days, and most modern routers have one built in, which while helpful, can be difficult to configure. Fortunately there are also distributions (distros) of the free operating system Linux which ...
Free Report: "Gartner Report: 2018 CEO Survey"

Free Report: “Gartner Report: 2018 CEO Survey”

Deep discipline is required for digital business. Read the full report to learn how to: Prepare for more deeply disciplined exploitation of the digital business changes ahead, Lock the leadership into winning through digital business, Drive business model changes and ...
Data Vulnerability Tools

Data Vulnerability Tools

Provided is a list of popular data vulnerability tools to help your company keep an eye out for any security related exploits that you should be made aware of ...
Top 10 Machine Learning Algorithms

Top 10 Machine Learning Algorithms to Know

Top 10 Machine Learning Algorithms Modern advancements in Artificial Intelligence (AI) are set to change our world for the better. These developments have largely been made possible due to technologies such as cloud sharing, data analytics, blockchain, and improved computing ...
The Developer’s Guide to Azure

The Developer’s Guide to Azure

Develop on a cloud platform designed for you. In this update of the Developer’s Guide to Azure, see how the comprehensive set of Azure app platform services fits your needs. Use it to navigate the architectural approaches and most common ...
real time hacking attacks

Live Real Time Hacking and Ransomware Tracking Maps Online

Real Time Hacking Attacks We've recently covered a few real time hacking maps but have decided to extend the list based on the recent ransomware activities with some additional real time hacking attack and ransomware tracking maps. Ransomware refers to malicious ...