ブラウザセキュリティ

ブラウザセキュリティとは、マルウェア、フィッシング攻撃、データ侵害などのセキュリティ脅威からウェブブラウザを保護するために実装された対策と技術を指します。

ブラウザは、インターネット経由の攻撃の入り口、データ漏えいの出口、SaaSやプライベートアプリケーションへのアクセスの経路として機能します。によると、攻撃の 98% 以上はインターネットの利用から発生しています。

Simply allowing the browser to go unmanaged may have been the simplest approach in the past. Unfortunately, this path is increasingly untenable. In part, that’s because many new browser capabilities are created to ease consumer friction and build the browser vendor’s ecosystem. And many of these features are enabled by default.

But these capabilities, while creating conveniences for consumers, can have security, compliance, and privacy implications that are problematic in the enterprise.

Managing the browser is a vital component of many different types of standards, including those from the Center for Internet Security (CIS). CIS benchmarks are often adopted in the following industries:

As mentioned earlier, some browser features can affect overall enterprise security in unforeseen ways, including expanding your attack surface and thwarting data privacy policies. Some elements may require intervention even in cases where the default policies seem appropriate. That’s because if policies are not specifically locked down, websites may query users for access, leaving the choice up to them.

Each enterprise — and each group of users within an enterprise — has its own needs and requirements. There is no such thing as “one-size-fits-all,” and you know better what will work than an outsider. The modern enterprise browser has flexible policy controls and reporting capabilities to ensure users only have access to the websites, applications and features needed to perform their role. Simplified iterations of policies are important, but whether or not to implement recommendations should remain in-house.