cerrar
cerrar
Su red del mañana
Su red del mañana
Planifique su camino hacia una red más rápida, más segura y más resistente diseñada para las aplicaciones y los usuarios a los que da soporte.
          Descubra Netskope
          Get Hands-on With the Netskope Platform
          Here's your chance to experience the Netskope One single-cloud platform first-hand. Sign up for self-paced, hands-on labs, join us for monthly live product demos, take a free test drive of Netskope Private Access, or join us for a live, instructor-led workshops.
            Líder en SSE. Ahora es líder en SASE de un solo proveedor.
            Líder en SSE. Ahora es líder en SASE de un solo proveedor.
            Netskope debuta como Líder en el Cuadrante Mágico™ de Gartner® para Single-Vendor SASE
              Protección de la IA generativa para principiantes
              Protección de la IA generativa para principiantes
              Learn how your organization can balance the innovative potential of generative AI with robust data security practices.
                Modern data loss prevention (DLP) for Dummies eBook
                Prevención moderna de pérdida de datos (DLP) para Dummies
                Get tips and tricks for transitioning to a cloud-delivered DLP.
                  Libro SD-WAN moderno para principiantes de SASE
                  Modern SD-WAN for SASE Dummies
                  Deje de ponerse al día con su arquitectura de red
                    Entendiendo dónde está el riesgo
                    Advanced Analytics transforms the way security operations teams apply data-driven insights to implement better policies. With Advanced Analytics, you can identify trends, zero in on areas of concern and use the data to take action.
                        Los 6 casos de uso más convincentes para el reemplazo completo de VPN heredada
                        Los 6 casos de uso más convincentes para el reemplazo completo de VPN heredada
                        Netskope One Private Access is the only solution that allows you to retire your VPN for good.
                          Colgate-Palmolive Salvaguarda su "Propiedad Intelectual" con Protección de Datos Inteligente y Adaptable
                          Colgate-Palmolive Salvaguarda su "Propiedad Intelectual" con Protección de Datos Inteligente y Adaptable
                            Netskope GovCloud
                            Netskope logra la alta autorización FedRAMP
                            Elija Netskope GovCloud para acelerar la transformación de su agencia.
                              Let's Do Great Things Together
                              La estrategia de venta centrada en el partner de Netskope permite a nuestros canales maximizar su expansión y rentabilidad y, al mismo tiempo, transformar la seguridad de su empresa.
                                Soluciones Netskope
                                Netskope Cloud Exchange
                                Netskope Cloud Exchange (CE) provides customers with powerful integration tools to leverage investments across their security posture.
                                  Soporte técnico Netskope
                                  Soporte técnico Netskope
                                  Nuestros ingenieros de soporte cualificados ubicados en todo el mundo y con distintos ámbitos de conocimiento sobre seguridad en la nube, redes, virtualización, entrega de contenidos y desarrollo de software, garantizan una asistencia técnica de calidad en todo momento
                                    Vídeo de Netskope
                                    Netskope Training
                                    La formación de Netskope le ayudará a convertirse en un experto en seguridad en la nube. Estamos aquí para ayudarle a proteger su proceso de transformación digital y aprovechar al máximo sus aplicaciones cloud, web y privadas.

                                      Cloud Threats Memo: Mitigating the Risk of Third-party Apps

                                      Sep 15 2023

                                      The use of third-party apps (also known as “connected apps”, “cloud to cloud apps”, “OAuth apps”) are apps developed by external and internal developers or organizations that can interact with and extend the functionality of a primary SaaS App. These are growing exponentially across organizations. According to the Netskope Cloud and Threat Report focused on Phishing, the average organization grants more than 440 third-party applications access to their Google data and applications, with organizations with less than 500 users granting access to at least 250 different cloud applications. In total 12,330 different applications were authorized by users in one organization.

                                      A more recent study by Abnormal Security confirmed this growth and, unsurprisingly, the associated growth of the risks connected with third-party apps. According to the same study, the average organization integrates 379 third-party apps with email (a 128% increase since 2020), and for large enterprises with 30,000+ employees, the number of integrated third-party apps soars to 3,973 on average, including apps for collaboration, productivity, development, social networking, security, and more. Even worse, across the integrated third-party applications, 37% have high-risk permissions, such as the ability to create and delete emails or users, and even reset user passwords.

                                      In a similar scenario, it’s no surprise that third-party apps are constantly exploited by opportunistic and state-sponsored threat actors to breach organizations. Consent Phishing (an attack where the attacker obtains an OAuth authorization token via a malicious cloud app) is quite a common technique, but unfortunately organizations can also be compromised through credentials stolen from legitimate third-party applications that were granted access to the victim’s cloud environment.

                                      Corporate users are too often unaware of the risks deriving from installing third-party apps on their corporate devices (or their personal devices used for corporate purposes) and granting them access to the internal resources (such as email, contacts, etc.). At the same time organizations need to protect themselves from the risks associated with the supply-chain including also third party applications that need to be connected with corporate cloud services.

                                      How Netskope Mitigates the Risk of Third-party Apps

                                      Netskope SaaS Security Posture Management (SSPM) allows users to reduce risk associated with third-party apps by discovering and controlling any connections made to an organization’s managed apps by add-ons or plug-ins. Netskope SSPM continuously monitors configuration settings for any connections to third-party apps and automatically assigns a risk score to these apps so that the organization can enforce the proper actions, for example blocking the riskiest apps. Netskope’s Cloud Confidentiality Index (CCI) allows SaaS app admins to proactively look up the third-party apps their users are requesting them to approve/provision and thus helps ensure that SaaS app admins can also help cut down the security risk around this.   

                                      Netskope SSPM:

                                      • Discovers all connected third-party apps, whether installed from an online marketplace or obtained internally.
                                      • Performs continuous assessment of third-party apps and ranking by associated risk to prioritize investigations (using patent pending technology).
                                      • Profiles the risk of third-party apps allowing security teams to prioritize remediation actions.

                                      Netskope CCI:

                                      Provides an option for SaaS app administrators to assess the risk of third-party apps available on well-known app marketplaces so as to help in approving such apps in your organization based on the reputation of the app vendor and the level of permissions being sought.

                                      Stay safe!

                                      author image
                                      Paolo Passeri
                                      Paolo supports Netskope’s customers in protecting their journey to the cloud and is a security professional, with 20+ years experience in the infosec industry.
                                      Paolo supports Netskope’s customers in protecting their journey to the cloud and is a security professional, with 20+ years experience in the infosec industry.

                                      ¡Mantente informado!

                                      Suscríbase para recibir lo último del blog de Netskope