雲端安全：為何您不該忽略暫時性資產
您的排程弱點掃描也許無法發現生命週期短暫的資產，因而為網路罪犯製造了攻擊安全缺口的機會。
雲端環境彈性的特質讓雲端資產得以動態佈建和停用，而且是由不屬於資安團隊的利害關係人 (如 DevOps、web 和電子商務團隊) 執行。這些生命週期短暫的資產也為試圖取得所有企業雲端資產能見度的資安專業人員帶來挑戰。等待每週一次的排程弱點掃描，並不能幫助您找到這些幾個小時之間就在雲端內上上下下的暫時性資產，因而造成了安全缺口。而這些缺口也提供了網路罪犯許多新的機會。生命週期短暫的動態資產需要一種同樣動態的弱點掃描方法。
為何您不該忽略生命週期短暫的雲端資產
有些人也許會問：「既然這些資產的生命週期那麼短，暫時性資產真的會對我們公司的整體安全態勢造成威脅嗎？」而另一些人則會爭論：「既然這麼不容易盤點這些暫時性資產的清單，不如我們還是堅守在更容易衡量的資產吧！」真相是，排程弱點掃描雖然提供了時點快照，但卻忽略了大量在掃描與掃描之間上上下下的雲端執行個體帶來的曝險。
許多雲端資產是彼此的複製品。當一個資產的弱點受到攻擊利用時，就可能會對其他複製的資產產生連鎖效應。一旦一個資產曝露在風險之中，即使其生命週期短暫，在它停用之前，沒人能預測它的爆炸半徑。
舉例來說，想像某一個屬於自動擴充 (autoscaling) 群組的服務，當業務的尖峰時段來臨時，該服務會自動擴充至符合容量需求的必要規模。如果這個剛剛部署的服務上存在重大弱點會怎麼辦？該服務會自動擴充至好幾百個執行個體，而每一個執行個體中都會有相同的重大弱點。
如您所見，對暫時性雲端資產採取「也許我們運氣好」或「鴕鳥心態」的方式，會使貴公司曝露在威脅之下，而對您努力不懈想保護的商譽與業務帶來負面影響。
利用 Tenable.io 保護雲端中的暫時性資產
您的資安團隊需要對您一日數變的雲端工作負載與執行個體擁有不間斷的能見度。貴公司弱點管理方案的設計應該要能強化動態雲端環境，獲得有效的安全性、不間斷的能見度與穩定的 IT 運作。
Tenable.io 可提供全方位的弱點管理方法，協助您透過在整個雲端架構中偵測弱點，以評估您的雲端攻擊破綻。Tenable.io 的 Amazon Web Services (AWS)、Microsoft Azure 和 Google Cloud Platform (GCP) 雲端連接器能近乎即時地發現您多重雲端環境中最新部署的暫時性運算資產。
此外，Tenable.io 無障礙評估功能則可協助您不間斷地評估您在 AWS 環境中雲端資產的弱點，而無需部署掃描器或安裝代理程式。無障礙評估對於處理生命週期短暫的雲端資產效果特別優異，它能協助您避免盲點和涵蓋範圍缺口。利用無障礙評估，當發現新的弱點時，您就能自動掃描雲端環境，協助您快速評估雲端資產是否含有最新的軟體瑕疵。
運用量身訂作的儀表板和報告，您就能與業務單位輕鬆溝通應優先處理的弱點資訊，包括那些仰賴暫時性雲端資產的部門。
深入瞭解
相關文章
Cybersecurity Snapshot: U.S. Gov’t Unpacks AI Threat to Banks, as NCSC Urges OT Teams to Protect Cloud SCADA Systems
March 29, 2024Check out new guidance for banks on combating AI-boosted fraud. Plus, how to cut cyber risk when migrating SCADA systems to the cloud. Meanwhile, why CISA is fed up with SQLi flaws. And best practices to prevent and respond to DDoS attacks. And much more!
Cybersecurity Snapshot: NSA Picks Top Cloud Security Practices, while CNCF Looks at How Cloud Native Can Facilitate AI Adoption
March 22, 2024Check out the NSA’s 10 key best practices for securing cloud environments. Plus, learn how cloud native computing could help streamline your AI deployments. Meanwhile, don’t miss the latest about cyberthreats against water treatment plants and critical infrastructure in general. And much more!
FlowFixation: AWS Apache Airflow Service Takeover Vulnerability and Why Neglecting Guardrails Puts Major CSPs at Risk
March 21, 2024Tenable Research discovered a one-click account takeover vulnerability in the AWS Managed Workflows Apache Airflow service that could have allowed full takeover of a victim’s web management panel of the Airflow instance. The discovery of this now-resolved vulnerability reveals a broader problem of misconfigured shared-parent domains that puts customers of major CSPs at risk.
Cybersecurity Snapshot: U.S. Gov’t Unpacks AI Threat to Banks, as NCSC Urges OT Teams to Protect Cloud SCADA Systems
March 29, 2024Check out new guidance for banks on combating AI-boosted fraud. Plus, how to cut cyber risk when migrating SCADA systems to the cloud. Meanwhile, why CISA is fed up with SQLi flaws. And best practices to prevent and respond to DDoS attacks. And much more!
Enhancing Transportation Cybersecurity and Fleet Management for the DoD
March 25, 2024Few things can halt operations across the Department of Defense like a critical failure of logistics and transportation. From automated asset inventory to malicious-activity detections through baselining, learn how Tenable OT Security can protect these critical functions within the DoD and work towards the federal government’s zero trust mandate in OT environments.
Cybersecurity Snapshot: NSA Picks Top Cloud Security Practices, while CNCF Looks at How Cloud Native Can Facilitate AI Adoption
March 22, 2024Check out the NSA’s 10 key best practices for securing cloud environments. Plus, learn how cloud native computing could help streamline your AI deployments. Meanwhile, don’t miss the latest about cyberthreats against water treatment plants and critical infrastructure in general. And much more!
- Cloud
- DevOps
- Tenable.io Vulnerability Management
- Vulnerability Management
- Vulnerability Scanning