下载PDF
IT services firm gains visibility, real-time data and threat protection with Netskope for AWS
技术
- 网络安全和隐私 - 云安全
- 基础设施即服务 (IaaS) - 云计算
适用功能
- 商业运营
用例
- 网络安全
服务
- 云规划/设计/实施服务
- 网络安全服务
挑战
Cloudrise 是一家 IT 服务公司,在手动检查云配置、确保合规性和防止数据丢失方面面临挑战。该公司专注于在遵守法规的同时保证客户数据安全。他们正在努力防止未经授权使用员工个人身份信息 (PII) 和客户数据。其他数据丢失预防 (DLP) 问题包括包含恶意软件的文件的传播和对恶意网站的访问。手动检查 Cloudrise 及其客户基础设施的云配置可能会让人不知所措。迫切需要一个能够根据 DLP 策略自动扫描数据的解决方案。
关于客户
Cloudrise 是一家 IT 服务公司,由拥有全球市场、成功创业公司和财富 500 强企业经验的商业和安全企业家创立。过去二十年来,他们一直致力于为客户提供无缝集成的数据保护解决方案,提高创新、服务交付和风险降低的标准。该公司通过评估、启用、自动化和管理数据保护和隐私计划来帮助组织。Cloudrise 自己的基础设施在 AWS 上运行,该公司选择 AWS 高级合作伙伴 Netskope 来保护该环境。
解决方案
Cloudrise 与 Netskope 合作实施 Netskope for AWS。Netskope for AWS 建立在 Netskope Security Cloud 之上,是全面云安全解决方案的一部分,该解决方案通过一个可自动扩展的云原生平台提供对 SaaS、IaaS 和 Web 的完全控制。实施过程非常顺利,包括对 Cloudrise 交付团队的培训,为他们提供了一个受控环境,让他们学习激活、采用和操作 Netskope 平台的最佳和最有效方法。借助 Netskope,IT 服务公司可以实时查看和控制活动,并制定策略禁止数据从托管存储桶泄露到非托管存储桶,从而保护公司免受意外或恶意内部行为的影响。
运营影响
相关案例.
Case Study
Enel Secures Italian Power Generation Network
Electric energy operators around the world are working to increase the reliability and cyber resiliency of their systems. This includes Enel, a global power company that manages and monitors the Italian power grid. This grid:• Serves 31 million customers• Has a net installed energy capacity exceeding 31 gigawatts• Includes more than 500 power generation plants,including hydroelectric, thermoelectric, and wind• Is managed and monitored by Enel 24/7/365• Is operated by Terna, the Italian Transmission System Operator (TSO)Enel is responsible for the availability of the grid’s underlying ICS and industrial network. It also manages Regional Control Centers and Interconnection Centers which connect with the TSO. The TSO manages the flow of energy to the grid plus controls and remotely regulates the power generation of power plants, increasing and decreasing power production as required. The complex system of interaction and cooperation between Enel and the TSO has strong security implications as well as operational and business challenges.
Case Study
Securing the Connected Car Ecosystem
In-vehicle communications and entertainment system hosts high-value or sensitive applications. API libraries facilitate communication and sharing of vehicle data. These API libraries are vulnerable to reverse engineering and tampering attacks and may even result in loss of passenger safety. Attackers can inject malware that may be able to migrate to other in-car networks such as the controller-area-network (CAN) bus which links to the vehicle’s critical systems. Software provided for dealers to interface with cars through the OBD2 port is vulnerable to reverse engineering and tampering attacks. Hackers may be able to abuse these tools to inject malicious code into the ECUs and CAN bus. Attackers can lift the cryptographic keys used, and use that to build their own rogue apps/software. Their cloned version of the original app/software may have altered functionality, and may intend to gain access to other in-car networks.
Case Study
Secure and Cloud-based Data Marketplace
The great promise of new connected concepts of industry like 'Industry 4.0' is their ability to deliver a historically unparalleled level of responsiveness and flexibility. While modern supply chains are already heavily integrated and designed to be fluid and fast moving, a large swathe of manufacturing still remains beholden to economies of scale, large production runs, and careful preplanning.The Industrial Internet of Things (IIoT) is set to change this by allowing small-batch or even custom manufacturing on a truly industrial scale. With machines whose functions are not set in stone, but flexible and determined by their operating software and with a new form of connectivity bringing industrial engineers, product manufacturers, and end users closer together than ever before. Ad-hoc adjustments to automotive parts, for example, during active product runs or the bespoke manufacturing of custom sneakers become very viable options indeed.Much of this remains a theoretical vision, but IUNO, the German national reference project for IT security in Industry 4.0 demonstrates the new capabilities in action with a secure technology data marketplace running a smart drinks mixer.
Case Study
Expedia Hosted by 2lemetry Through AWS
Expedia is committed to continuous innovation, technology, and platform improvements to create a great experience for its customers. The Expedia Worldwide Engineering (EWE) organization supports all websites under the Expedia brand. Expedia began using Amazon Web Services (AWS) in 2010 to launch Expedia Suggest Service (ESS), a typeahead suggestion service that helps customers enter travel, search, and location information correctly. According to the company’s metrics, an error page is the main reason for site abandonment. Expedia wanted global users to find what they were looking for quickly and without errors. At the time, Expedia operated all its services from data centers in Chandler, AZ. The engineering team realized that they had to run ESS in locations physically close to customers to enable a quick and responsive service with minimal network latency.
Case Study
OTA Software Updates for Smart Energy (gridX)
gridX has a requirement for over-the-air software updates for their gridBox devices and used the Yocto Project for their builds. The driver for the requirement was having the ability to quickly support new features, as well as deploying bug fixed and path known security vulnerabilities. New software updates with a US stick manually to all gridBox devices in the field would be prohibitively expensive and labor-intensive.
Case Study
Transformed IT Infrastructure Improves Business Agility
A global security, storage, and systems management software provider planned to demerge into two separate companies. To prepare, it undertook a major overhaul of its IT infrastructure and operations strategy. A key requirement: streamlining the Hosting Group, which handled compute, storage, and middleware operations. These functions had grown complex and had a wide geographic distribution. The company planned to bring them under closer in-house management.The company looked to increase its business agility so it could quickly and creatively respond to customer demands with improved internal collaboration and optimized go-to- market and IT service delivery capabilities. Modernizing IT functions, and making them more responsive, was critical to achieving these goals.