2023年2月28日

安全團隊無法控製風險SaaS-to-SaaS連接員工提供數百成千上萬的第三方應用程序訪問的兩個最主要工作區,365年微軟和穀歌工作區,根據自適應的盾牌。沒有監督或控製與安全團隊,公司沒有量化風險的途徑,這些SaaS-to-SaaS連接給他們的業務。風險SaaS-to-SaaS連接這些SaaS-to-SaaS連接提供了增強的功能,提高流程效率,他們還允許應用程序讀取、更新、創建、刪除、或其他與公司和個人數據。在其報告中,自適應保護標識有多少SaaS應用程序被連接到核心SaaS堆棧,特別是365年微軟和穀歌工作區和業務關鍵型應用程序,如Salesforce和鬆弛,權限被授予這些類型的應用程序,這些應用程序和風險水平。根據研究,公司與10000 SaaS用戶平均2033應用程序連接到微軟365和6710連接到穀歌的工作區。公司使用Google的工作區中,這一數字躍升至13913年平均為10000 - 20000 SaaS用戶連接應用程序。公司必須製定政策為集成應用程序而權限的風險水平不同的應用,研究人員發現,39%的應用程序連接到微軟365和10%“高風險”權限訪問穀歌工作空間。更多細節在穀歌工作空間,其中包括三大高危權限組(78%)要求的能力,編輯、創建和刪除任何或所有Google Drive文件、電子郵件和文檔。365年微軟的生態係統,兩種最常見的高風險範圍授予應用程序讀的能力,創建、更新和刪除數據。在一起,他們占所有高風險範圍獲得的27%。 “The simple app-to-app connectivity that makes SaaS apps vital productivity tools also makes them significantly dangerous,” said Maor Bin , CEO of Adaptive Shield. “While it’s clearly unrealistic to expect businesses to curb their reliance on SaaS apps, they cannot allow this adoption to go unchecked. To eliminate these risks companies must develop policies for integrating apps, prioritize employee training, and deploy monitoring solutions that help over-taxed security teams identify and eliminate high-risk permission sets before it’s too late.” While these challenges are most prominent in Microsoft 365 and Google Workspace, they are not exclusive to these apps. As part of this effort, Adaptive Shield examined two other business-critical apps, Slack and Salesforce. The research shows that organizations have an average 222 SaaS-to-SaaS apps for Slack and another 41 apps for Salesforce. A final area of research are app categories that are connected most frequently. According to the research, email applications are far and away the number one connected category followed by apps related to file and document management, communications and meetings and calendars and scheduling. More about