{"id":31181,"date":"2022-11-21T22:34:18","date_gmt":"2022-11-21T21:34:18","guid":{"rendered":"https:\/\/www.makingscience.com\/?p=31181"},"modified":"2022-11-21T22:34:18","modified_gmt":"2022-11-21T21:34:18","slug":"web-security-how-to-protect-your-most-valuable-digital-assets","status":"publish","type":"post","link":"https:\/\/www.makingscience.com\/us\/blog\/web-security-how-to-protect-your-most-valuable-digital-assets\/","title":{"rendered":"Web Security: How to protect your most valuable digital assets"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">The data of your company, your clients, and the infrastructure of your business\/organization are some of the main assets of any company. Often, these assets are not sufficiently protected.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">When we talk about protection, we refer to the implementation of security measures, technology, and tools that protect your systems from external threats. These security measures also ensure that human error does not leave the organization&#8217;s assets exposed.<\/span><\/p>\n<p><b>Security must be present from the conceptualization of digital services and their migration to the cloud<\/b><span style=\"font-weight: 400;\">. Companies must adhere to all regulations and ensure the reliability of their environments. This way, they can avoid unpleasant situations that could result in fines, economic losses, and reputational damage.<\/span><\/p>\n<p><b>Do companies invest in security?<\/b><span style=\"font-weight: 400;\"> Not as much as they should. That is why we want to stress the importance of investing resources and budget in solutions, technology, and tools that can help you prevent disasters.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">And just as important as investing in this security technology is working with the best partners to be able to implement and deploy strategies that allow us to face any attack.\u00a0<\/span><\/p>\n<p><b>Google Cloud Platform<\/b><span style=\"font-weight: 400;\"> has the capacity and tools to improve the security of your company. Some of the products that we can implement together include<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">\u00a0Security Command Center<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">\u00a0Zero Trust: Beyond Core Enterprise\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Chronicle<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Virus Total<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Recaptcha<\/span><\/li>\n<\/ol>\n<h3><span style=\"font-weight: 400;\">Security Command Center<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">SCC is a Google Cloud security and risk management platform. With it, you gain centralized visibility and control, can detect misconfigurations and vulnerabilities, can report violations and help with compliance, and detect threats that put your Google Cloud resources at risk.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Its main functions are:\u00a0<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Resource discovery and inventory<\/b><span style=\"font-weight: 400;\">: Discover and query your resources in near real-time from App Engine, BigQuery, Cloud SQL, Cloud Storage, Compute Engine, Cloud Identity, and Access Management, Google Kubernetes Engine, and many more. Review the history of discovery processes to locate new, changed, or deleted resources.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Threat prevention<\/b><span style=\"font-weight: 400;\">: Stay informed about the security status of your Google Cloud resources. Detect the most common vulnerabilities that can put your web applications at risk, such as cross-site scripting or outdated libraries, running on App Engine, GKE, and Compute Engine. To quickly fix misconfigurations, just click directly on the affected resource and follow the steps provided.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Threat detection<\/b><span style=\"font-weight: 400;\">: Uses logs running on Google Cloud at scale to identify threats. Detects some of the most common container attacks, including suspect binaries, suspect libraries, and reverse shells.<\/span><\/li>\n<\/ul>\n<h3><span style=\"font-weight: 400;\">Zero Trust: Beyond Core Enterprise\u00a0<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">A Zero Trust solution that enables secure access to applications and resources, and offers built-in threat and data protection. We recommend it because<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>It\u2019s a scalable and reliable solution<\/b><span style=\"font-weight: 400;\">: It is based on the backbone of Google&#8217;s global infrastructure and network to offer an optimal and secure experience with integrated protection against denial of service attacks (DDoS), low latency connections, and flexible scaling.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>It offers comprehensive and continuous protection<\/b><span style=\"font-weight: 400;\">: A layered approach to security between users, access, data, and applications that help protect every click against malware, data loss, and fraud.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Of its open and scalable ecosystem<\/b><span style=\"font-weight: 400;\">: Includes information and profiling signals from leading security vendors to offer a higher level of protection.<\/span><\/li>\n<\/ul>\n<h3><span style=\"font-weight: 400;\">Chronicle<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">Google&#8217;s cloud-native SIEM, Chronicle, is designed to handle massive amounts of data and mine signals to find threats instantly.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Chronicle works by processing your data into a private container and combining it with data from Google. Everything is then aggregated, normalized, and linked into a consistent timeline, to later expose all that data through investigation, search, and discovery, as well as to other security products through APIs.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The advantages of Chronicle are<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It is infinitely elastic, providing an elastic container to store enterprise security telemetry<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It\u2019s Cloud Native, so it\u2019s able to ingest, normalize and index massive amounts of telemetry data. It can also correlate it with known threats.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Its high storage capacity, where access to years of telemetry can mean the difference between clear answers and simply hoping for the best.<\/span><\/li>\n<\/ol>\n<h3><span style=\"font-weight: 400;\">Virus Total<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">VirusTotal, now part of Google Cloud, provides threat context and reputation data to help analyze suspicious files, URLs, IP addresses, and domains to detect cybersecurity threats. VirusTotal reports show many crowdsourced details about why a domain, attachment, or IP address might be considered dangerous. For more information, see the <\/span><a href=\"https:\/\/www.virustotal.com\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">VirusTotal website<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n<h3><span style=\"font-weight: 400;\">reCAPTCHA<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">reCAPTCHA protects your website from fraud and abuse without creating friction.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It uses an advanced risk analysis engine and adaptive challenges to prevent malicious software from engaging in abusive activities on your website. Meanwhile, legitimate users will be able to log in, make purchases, view pages, or create accounts and fake users will be blocked.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">reCAPTCHA can prevent various threats, such as<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Scraping<\/b><span style=\"font-weight: 400;\">: Theft of content to divert advertising revenue or competitive use.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Fraudulent transactions<\/b><span style=\"font-weight: 400;\">: Purchase of goods or gift cards with stolen credit cards.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Account Takeover (ATO)<\/b><span style=\"font-weight: 400;\">: Credential stuffing to validate stolen accounts.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Accounts being misused<\/b><span style=\"font-weight: 400;\">: Creation of new accounts for promotion value or future misuse.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Fake Posts<\/b><span style=\"font-weight: 400;\">: Posting malicious links or spreading misinformation.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Money laundering<\/b><span style=\"font-weight: 400;\">: Bot that generates revenue from ad clicks on fraudulent websites.<\/span><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">As you can see, there are many ways to better protect your digital assets. But which one should you choose?\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Are you ready to start the journey of making your users\u2019 web experience more secure? Our cybersecurity experts can audit your site to help you pick the best solution for your particular needs. What are you waiting for?!<\/span><\/p>\n<p style=\"text-align: center;\"><a style=\"border-radius: 15px; padding: 1em; background-color: #f0076f; color: white;\" href=\"https:\/\/www.makingscience.com\/contact\/\">Get in touch<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The data of your company, your clients, and the infrastructure of your business\/organization are some of the main assets of any company. Often, these assets are not sufficiently protected. When we talk about protection, we refer to the implementation of security measures, technology, and tools that protect your systems from external threats. These security measures [&hellip;]<\/p>\n","protected":false},"author":23,"featured_media":25969,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[976,555,701],"tags":[],"class_list":["post-31181","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-it-solutions","category-security"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.makingscience.com\/us\/wp-json\/wp\/v2\/posts\/31181","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.makingscience.com\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.makingscience.com\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.makingscience.com\/us\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/www.makingscience.com\/us\/wp-json\/wp\/v2\/comments?post=31181"}],"version-history":[{"count":0,"href":"https:\/\/www.makingscience.com\/us\/wp-json\/wp\/v2\/posts\/31181\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.makingscience.com\/us\/wp-json\/wp\/v2\/media\/25969"}],"wp:attachment":[{"href":"https:\/\/www.makingscience.com\/us\/wp-json\/wp\/v2\/media?parent=31181"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.makingscience.com\/us\/wp-json\/wp\/v2\/categories?post=31181"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.makingscience.com\/us\/wp-json\/wp\/v2\/tags?post=31181"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}