April 26, 2017

Combating Malware Requires a New Way of Thinking

By Nat Kausik

Malware in the Cloud

It’s no secret that cloud adoption has exploded in the enterprise over last few years. However, this aggressive cloud adoption trend has also opened the floodgates for a host of new threats and elevated the risk of data being lost or stolen. Perhaps not surprisingly, malware and ransomware in the cloud – longtime challenges for endpoints – top the list of the most prominent threats facing enterprises investing in the cloud. Additionally, with increased reliance on widely used interconnected public cloud apps in the enterprise, malware and ransomware have the potential to touch – and compromise – more data than ever before.

Yet, despite new and increasing risks to data, few providers offer dedicated cloud malware protection. While some cloud apps like G Suite, office 365, and Azure can identify common malware, such solutions are completely ineffective in combatting zero-day attacks when end-users need instant access to data in the cloud or expect an instant upload of a file.

The lack of proactive cloud Malware solutions underscores an industry gap that indicates – among other things – organizations are unprepared and under-equipped to effectively address next-generation AI-based malware. The most dangerous threats aren’t known malware, but the unknown, zero-day attacks that fly under the radar of security defenses and result in weeks or months of data exfiltration – often at a major cost to the targeted organization. Once advanced malware makes its way into a cloud app, there’s little an organization can do to stop its spread. These malicious files are often downloaded to endpoints, make their way to connected apps, and are then shared across the organization.

cloud malware

Here are a few steps organizations can take to solidify malware defenses in the cloud and keep sensitive data from falling into the wrong hands.

Rethink the Security of Enterprise Apps:

G Suite and Office 365 are perhaps the most trusted of any enterprise apps. Unlike random online video content and unfamiliar internet games, enterprise apps are supposed to be functional and secure, and their files are expected to be free of malware. Consequently, most people don’t think twice about downloading corporate documents or attachments. Unfortunately for the end user, cyber criminals will happily capitalize and exploit this trust. Unbeknownst to many, enterprise apps contain the same flaws as any others, and don’t come with built-in security protections. So, there is strong likelihood that they’re hosting malware just like any other app.

Find a Trusted Third Party Endpoint Security Solution:

Major cloud providers such as Salesforce and Box all work with third-party security solutions. Because most cloud platforms don’t come equipped with advanced threat protection, third-party solutions are a must. Not all endpoint security solutions are the same, so it is recommended that you stack up endpoint protection to the best possible standards. Top solutions will catch most malware coming to endpoints, which includes both desktops and laptops. For today’s threats and IT structure, organizations will need a solution that works across applications, as opposed to a solution that only works on one or a few apps.

Stop Malware from Spreading:

One of the ways to protect data from the threat of malware is to prevent it from spreading. Advanced Threat Protection (ATP) technologies allow organizations to detect and block known and unknown malware before it hits the cloud, assess the risks of files, and stop malicious attacks in their tracks.

Implement Dedicated Mobile Device Protection for BYOD:

If you don’t see mobile protection incorporated in lists of enterprises’ endpoint features, there’s a distinct reason: it’s not their bread and butter. Endpoint security does a good job of securing infrastructure and identifying bad files, but falls short when protecting the end users or providing secure access of that file – especially as more users rely on unmanaged personal devices to conduct business functions. Organizations need mobile-specific security solutions that work seamlessly across all apps, provide a frictionless user experience, secure corporate data, and ensure regulatory compliance requirements are met.

Invest in Zero-Day Protection:

As malware becomes increasingly stealthy, sophisticated, and elusive, organizations need to get a few steps ahead of potential attacks with zero-day protection that can address both known and unknown threats. That means steering clear of solutions that protect solely with signature-based technology and block only known threats. On the other hand, next-generation tools combat advanced threats with static analysis, basing a risk decision on hundreds of characteristics associated with a file. They can then identify the threat based on its behaviors, even before it has been found in the wild.

By Nat Kausik

Nat Kausik

Cloud Computing Humor
Mariusz Michalowski

Streamlining Infrastructure Management with Terraform Automation

Streamlining Infrastructure Management The growth of cloud computing and infrastructure as code (IaC) practices has [...]
Read more

AI at the Gate: Navigating the Future of Cybersecurity with SonicWall’s Bobby Cornwell

Navigating the Future of Cybersecurity In the face of the digital age’s advancements, AI’s role [...]
Read more
Gary Bernstein

The AI Vanguard: MixMode’s 2024 Insight into Cybersecurity’s New Era

Insight into Cybersecurity’s New Era As we enter into 2024, the adoption of AI in [...]
Read more

Navigating M&A Waters: The Core Role of Active Directory Migrations

Navigating M&A Waters On the whole, 2023 was a slow year for mergers and acquisitions. [...]
Read more
Freshworks

Freshservice’s Journey to Streamlining IT Operations

Freshservice, a cloud-based IT service management solution, is a part of Freshworks Inc., a company [...]
Read more
Randy

Gain Critical AI Insights: The Oxford Artificial Intelligence Programme

Acquire Essential Skills for Success in the AI Industry The expansion of online learning within [...]
Read more

SPONSOR PARTNER

Unlock the power of Google Cloud with a $350 signup credit. Experience enhanced scalability, security, and innovation for your projects today!
© 2024 CloudTweaks. All rights reserved.