브라우저 보안

브라우저 보안이란 멀웨어, 피싱 공격, 데이터 침해와 같은 보안 위협으로부터 웹 브라우저를 보호하기 위해 구현되는 조치 및 기술을 말합니다.

브라우저는 인터넷 기반 공격의 진입점, 데이터 유출의 출구 지점, SaaS 및 개인 애플리케이션에 대한 액세스를 위한 통로 역할을 합니다.에 따르면 공격의 98% 이상이 인터넷 사용에서 비롯됩니다.

Simply allowing the browser to go unmanaged may have been the simplest approach in the past. Unfortunately, this path is increasingly untenable. In part, that’s because many new browser capabilities are created to ease consumer friction and build the browser vendor’s ecosystem. And many of these features are enabled by default.

But these capabilities, while creating conveniences for consumers, can have security, compliance, and privacy implications that are problematic in the enterprise.

Managing the browser is a vital component of many different types of standards, including those from the Center for Internet Security (CIS). CIS benchmarks are often adopted in the following industries:

As mentioned earlier, some browser features can affect overall enterprise security in unforeseen ways, including expanding your attack surface and thwarting data privacy policies. Some elements may require intervention even in cases where the default policies seem appropriate. That’s because if policies are not specifically locked down, websites may query users for access, leaving the choice up to them.

Each enterprise — and each group of users within an enterprise — has its own needs and requirements. There is no such thing as “one-size-fits-all,” and you know better what will work than an outsider. The modern enterprise browser has flexible policy controls and reporting capabilities to ensure users only have access to the websites, applications and features needed to perform their role. Simplified iterations of policies are important, but whether or not to implement recommendations should remain in-house.