IT PARK
    Most Popular

    How to do when the mouse is not working

    Jun 11, 2025

    NVIDIA open source "guardrail" software for generative AI security

    Jun 19, 2025

    Artificial intelligence-driven automation increases employee job satisfaction by nearly 60%

    Jun 21, 2025

    IT PARK IT PARK

    • Home
    • Encyclopedia

      A one-minute walk through the difference between a switch and a router

      Jul 13, 2025

      What are the Wi-Fi password security levels?

      Jul 12, 2025

      What is Qualcomm three carrier aggregation

      Jul 11, 2025

      What does bootloader mean?

      Jul 10, 2025

      How to delete all alarms on iPhone in one step?

      Jul 09, 2025
    • AI

      Can AI work this round when you ask a doctor online to break a disease?

      Jul 13, 2025

      NASA is developing an artificial intelligence interface where astronauts can talk directly to AI

      Jul 12, 2025

      76-year-old father of deep learning Hinton left Google! Publishes AI threat theory, pessimistic prediction of catastrophic risk

      Jul 11, 2025

      What is the neural network of artificial intelligence?

      Jul 10, 2025

      What is the core issue of AI technology?

      Jul 09, 2025
    • Big Data

      Business Intelligence BI Industry Knowledge - Aerospace, Satellite Internet Industry

      Jul 13, 2025

      What are the misconceptions in data governance in the digital age?

      Jul 12, 2025

      What is a data warehouse? Why a Data Warehouse?

      Jul 11, 2025

      What is Data Governance? Why do organizations need to do data governance?

      Jul 10, 2025

      Winning Business Excellence with Data Analytics

      Jul 09, 2025
    • CLO

      Data Protection Best Practices for Securing Cloud Hosting

      Jul 13, 2025

      How to Reduce the Risk of Cloud Native Applications?

      Jul 12, 2025

      How should the edge and the cloud work together?

      Jul 11, 2025

      Last-generation firewalls won't meet cloud demands

      Jul 10, 2025

      Healthcare Explores Cloud Computing Market: Security Concerns Raise, Multi-Party Collaboration Urgently Needed

      Jul 09, 2025
    • IoT

      Siemens launches Connect Box, a smart IoT solution for managing small buildings

      Jul 13, 2025

      What is Mobile IoT and how does it work?

      Jul 12, 2025

      Smart travel tools help visually impaired navigate

      Jul 11, 2025

      Why sensors accumulate so much sensitive data

      Jul 10, 2025

      5 Reasons You Should Prototype IoT Devices

      Jul 09, 2025
    • Blockchain

      Blockchain and the Postal Service

      Jul 13, 2025

      Blockchain insulation, the universe is open

      Jul 12, 2025

      Blockchain technology helps track new crown virus

      Jul 11, 2025

      Blockchain Foundation - What is Blockchain Technology

      Jul 10, 2025

      Blockchain Wallet

      Jul 09, 2025
    IT PARK
    Home » CLO » On the Importance of Cloud Access Security Agent CASB
    CLO

    On the Importance of Cloud Access Security Agent CASB

    As enterprise IT operations are gradually going to the cloud locally, they begin to look for security access control methods to introduce cloud operations from internal data centers. Cloud Access Security Proxy (CASB) is such a tool. This article will take you to study CASB and explain its origin and evolution.
    Updated: Jun 03, 2025
    On the Importance of Cloud Access Security Agent CASB

    As enterprise IT operations are gradually going to the cloud locally, they begin to look for security access control methods to introduce cloud operations from internal data centers. Cloud Access Security Proxy (CASB) is such a tool. Today, CASB has been introduced for ten years and is a common component of enterprise security infrastructure. But for many people, it is still a mystery to know exactly the function of CASB and why it is different from the next generation firewall.

    This article will take you to study CASB and explain its origin and evolution.

    The original purpose of CASB is to provide visibility of all cloud services in the enterprise infrastructure. CASB is the first special weapon against "shadow IT" and unauthorized cloud services. CASB is deployed at the network boundary and uses a variety of proxy types to identify each response to or connection from the cloud service, regardless of whether the cloud service is approved.

    At the beginning of the creation of CASBs, they were often deployed as physical devices in customer data centers. Now, they can still be deployed, but they are more deployed as cloud services themselves in the "security as a service" (SaaS) model. In both cases, today's CASB uses agents and APIs to identify the largest possible range of cloud services and take action based on the additional functions that the product now has.

    Knowing the existence of cloud services is not the same as protecting them (or implementing security control for specific services), so CASB gradually develops and provides more services for the security team. As Gartner said, CASB's "four pillars" have developed - visualization, compliance, data security and threat protection.

    These four functional areas are important in the shared responsibility cloud security model, in which cloud providers are responsible for protecting their infrastructure, and cloud customers are responsible for the security of their applications and data.

    So, what is the real meaning of the "four pillars"? How are they used to protect the enterprise cloud? The following will be discussed one by one.

     

    visualization

    CASB can let enterprise leaders know whether the cloud services that all employees insist on using in the network are safe. Although this is necessary and frightening, the current CASB can indeed provide partial detection. CASB can be used to find and monitor the way to and from cloud service traffic. It can also tell the security team which employees are using cloud services and how they get cloud services. When confronted with employees, CASB tools can provide effective help if employees do not admit that their personal behavior has damaged the company's security plan.

    Compliance

    With the development of CASB, especially when they use APIs instead of agents to improve the visibility of cloud businesses, they can view data transferred from one cloud to another and between internally deployed infrastructure and clouds. In addition to providing the security team with a better understanding of the organization's cloud infrastructure, it can also view the data stored in the cloud and being processed.

    Many aspects of compliance depend on understanding where and how data is stored. In addition to external regulations, many organizations have internal rules on how to store and handle specific types of data. CASB allows the security team to clearly understand the status of cloud bound data, so that it can detect and correct the situation of employees storing or migrating data to avoid violating external regulations.

    data security

    By understanding the status of data on the cloud, CASB can take the next step to protect the data. Through API controls, CASB can view transactions that have never entered the enterprise network (such as transactions between cloud services). CASB can implement a series of rules, such as data encryption or obfuscation, specific requirements for authentication and access control, and other parameters, to ensure that data is stored in a secure manner.

    Threat protection

    "Access" is a part of CASB. Such products can provide threat protection and strengthen the access and authentication control of cloud data applications. In many cases, CASB can monitor business activities and execute rules by interacting with existing single sign on or "identity as a service tool". One of the advantages of CASB is the ability to integrate with the existing security infrastructure, which distinguishes CASB from other tools.

    In general, next-generation firewalls, Web application firewalls, and other security tools are considered complex and unable to maximize their advantages. In contrast, CASB has always been a tool that is easy to configure and deploy, even for inexperienced security teams.

    Previous Article When AI starts to have "subconsciousness"
    Next Article Transforming the construction industry through digital twin modeling

    Related Articles

    AI

    How to prove you're human in the AI jungle?

    Jul 08, 2025
    AI

    AGI Avengers! Google Brain and DeepMind officially announced a merger

    Jun 27, 2025
    CLO

    Last-generation firewalls won't meet cloud demands

    Jul 10, 2025
    Most Popular

    How to do when the mouse is not working

    Jun 11, 2025

    NVIDIA open source "guardrail" software for generative AI security

    Jun 19, 2025

    Artificial intelligence-driven automation increases employee job satisfaction by nearly 60%

    Jun 21, 2025
    Copyright © 2025 itheroe.com. All rights reserved. User Agreement | Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.