cloud risk trends for 2019: new research from mcafee · 2019-06-04 · cloud risk trends for 2019:...
TRANSCRIPT
![Page 1: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/1.jpg)
Cloud Risk Trends for 2019: New Research from McAfee
David Berardinelli, Cloud Security Architect
![Page 2: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/2.jpg)
Full Report here:
https://www.skyhighnetworks.com/cloud-report/
![Page 3: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/3.jpg)
• Comprehensive Cloud Usage Data • Based on Anonymized Information from
MVISION Cloud Production• 1000s customers• 2 billions events a day
McAfee Cloud Risk Trends for 2019
![Page 4: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/4.jpg)
97% of surveyed companies are actively adopting the cloud
Source: McAfee Cloud Adoption Report, Nov 2018
![Page 5: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/5.jpg)
5
Perception
0200400600800
100012001400160018002000
SurveyNorth
America
SurveyLATAM
SurveyEurope
SurveyAPAC
SurveyJapan
Reality
Total Cloud Services
![Page 6: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/6.jpg)
6
The average organization now uses 1,935 cloud apps
457638
8541018
11691353
169
259
333
409
513
582
626
897
1187
1427
1682
1935
2013 2014 2015 2016 2017 2018
Enterprise cloud apps Consumer cloud apps
an increase of 15% over last year
Source: McAfee Cloud Adoption Report, Nov 2018
![Page 7: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/7.jpg)
7
Perception vs Reality
What you don’t see can’t be secured
0200400600800
100012001400160018002000
SurveyNorth
America
SurveyLATAM
SurveyEurope
SurveyAPAC
SurveyJapan
Reality
Total Cloud Services
Perception Gap
![Page 8: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/8.jpg)
8Source: Business @ Work Finance 2018, Okta
The average Financial Services organization uses 1,545 cloud apps
![Page 9: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/9.jpg)
9
There are over 400 collaboration and file sharing applications in use
File Sharing & Collaboration,
20.9%
Finance, 7.5%
IT Services, 7.1%
Cloud infrastructure,
7.1%
Development, 6.5%
HR, 6.3%
Education, 5.7%
Business Intelligence,
5.3%
Security , 3.8%
Media, 3.6%
Healthcare, 3.2%
CRM, 2.0%
Other, 5.3%
Project Management
, 2.4%
Cloud Storage,
2.3%
E-Commerce,
2.3%
Content Sharing,
2.3%
Social Media, 1.7%
Logistics,
1.7%
Networking,
1.5%
Tracking , 1.4%
![Page 10: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/10.jpg)
10
Low Risk Apps76%
Medium Risk Apps15%
High Risk Apps9%
Risk: Some of these even claim ownership of data uploaded in their terms of service
![Page 11: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/11.jpg)
11Source: McAfee Cloud Adoption Report, Nov 2018
Most Cloud Apps are not Enterprise-ready
![Page 12: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/12.jpg)
McAfee Confidentiality Language
Sanctioned Services
![Page 13: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/13.jpg)
Full Report here:
https://www.skyhighnetworks.com/cloud-report/
![Page 14: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/14.jpg)
14
Top 10 Cloud Services
![Page 15: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/15.jpg)
83% of organizations worldwide admit that they store sensitive data in the cloud
Source: McAfee Cloud Adoption Report, Nov 2018
![Page 16: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/16.jpg)
16
16%
31%
8%7%
13%
11%
5%5%
Salesforce
Office 365Google Docs2%
Slack2%
AWS
CustomApps
BoxServiceNow
High-RiskShadow
Med/Low-RiskShadow
Office 365 contains the most sensitive data, at 31%
Source: McAfee Cloud Adoption Report, Nov 2018
![Page 17: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/17.jpg)
17
Sensitive Data in the Cloud
Confidential data, 27%
Email data, 20%
Password protected data, 17%
PII, 16%
Payment data, 12%
PHI, 9%
![Page 18: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/18.jpg)
18
Sensitive Data in the Cloud – When Sharing isn’t Caring
17%
18%
22%
16%
17%
18%
19%
20%
21%
22%
23%
2016 2017 2018
22% of cloud users share files
![Page 19: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/19.jpg)
19
Sensitive Data in the Cloud – When Sharing isn’t Caring
43%
47%
48%
40%
41%
42%
43%
44%
45%
46%
47%
48%
49%
2016 2017 2018
48% of all files in the cloud are shared with at least one other person
![Page 20: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/20.jpg)
20
12% of shared files are accessible to anyone with a link
14% of files shared with a personalemail address
Source: McAfee Cloud Adoption Report, Nov 2018
Sensitive Data in the Cloud – When Sharing isn’t Caring
![Page 21: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/21.jpg)
McAfee Confidentiality Language
IaaS
![Page 22: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/22.jpg)
Full Report here:
https://www.skyhighnetworks.com/cloud-report/
![Page 23: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/23.jpg)
23
AWS dominates in terms of user access count
Source: McAfee Cloud Adoption Report, Nov 2018
![Page 24: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/24.jpg)
24
Most organizations have a multi-cloud strategy
Source: McAfee Cloud Adoption Report, Nov 2018
+ GCP
![Page 25: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/25.jpg)
Average organization has 14 misconfigured IaaS services running at a given time
Source: McAfee Cloud Adoption Report, Nov 2018
![Page 26: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/26.jpg)
26Source: McAfee Cloud Adoption Report, Nov 2018
![Page 27: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/27.jpg)
27
Data Exposures in IaaS—Ghost Writer
McAfee Discovers Ghost Writer – S3 Buckets Configured for Write Access open up Customers to Major Vulnerabilities
![Page 28: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/28.jpg)
McAfee Confidentiality Language
Cloud Threats
![Page 29: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/29.jpg)
Threats in Office365 have grown 63% in past two years
![Page 30: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/30.jpg)
30
Cloud is the new favorite target of threat actors
Source: McAfee Cloud Adoption Report, Nov 2018
![Page 31: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/31.jpg)
31
Data Exposures in SaaS—Knock Knock
McAfee Discovers Knock KnockHacker Exploiting Compromised Admin
Account to hack into Office 365
![Page 32: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/32.jpg)
32
Identifying cloud threats is like finding a needle in the “CloudStack”
100M:1 events:threats
Source: McAfee Cloud Adoption Report, Nov 2018
![Page 33: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/33.jpg)
So, what do we do about all this???
![Page 34: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/34.jpg)
Full Report here:
https://www.skyhighnetworks.com/cloud-report/
![Page 35: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/35.jpg)
35
Data Classification & Accountability
Client & End-Point Protection
Identity & Access Management
Application Level Controls
Network Control
Host Infrastructure
Physical Security
SaaSPaaSIaaS
Cloud Shared Responsibility Model
Service Provider Responsibility
Customer Responsibility
SaaS
IaaS/PaaS
![Page 36: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/36.jpg)
36
Unmanageddevices
Collaboration Malware
Rogue Employee
Compromised Accounts
Shared Responsibility Model for SaaS
![Page 37: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/37.jpg)
37
Compromised Accounts
MalwareMisconfiguration
Provisioning Sprawl
Containers and Workloads
Rogue Use
Workload to Workload Communication
Shared Responsibility Model for IaaS/PaaS
![Page 38: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/38.jpg)
“Through 2020, 95% of cloud security failures will be the customer’s fault.”Gartner Magic Quadrant for CASB—2017
![Page 39: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/39.jpg)
In 2018, the 60% of enterprises that implement appropriate cloud visibility and control tools will experience 33%
fewer security failures
Source: Gartner
![Page 40: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/40.jpg)
Through 2020, public cloud infrastructure-as-a-service (IaaS) workloads will suffer at
least 60% fewer security incidents than those in traditional data centers
Source: Gartner
![Page 41: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/41.jpg)
41
MVISION Cloud
Secure Enterprise Data in the Cloud and Protect from Threats
SaaS IaaS/PaaS
MVISION Cloud
Visibility Data Security
Compliance Threat Protection
Adopt a CASB Platform
![Page 42: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/42.jpg)
McAfee Confidentiality Language
Thank you!http://www.mcafee.com/cloud
![Page 43: Cloud Risk Trends for 2019: New Research from McAfee · 2019-06-04 · Cloud Risk Trends for 2019: New Research from McAfee David Berardinelli, Cloud Security Architect. ... What](https://reader033.vdocuments.mx/reader033/viewer/2022060222/5f07b19d7e708231d41e4470/html5/thumbnails/43.jpg)
Full Report here:
https://www.skyhighnetworks.com/cloud-report/