There have been two major trends in the IT industry since the start of the global pandemic around COVID-19. Neither should be particularly surprising. First, cyber criminals have been more active as we’ve talked about in other blog articles, upping their game as they are working from home like everyone else. Second, companies with massive portions of their workforce working from home having been accelerating their move to the cloud of their applications. Additional proof of the second came out with Google’s reporting of their Q1 numbers. For Q1 2020, Google Cloud — which includes Google Cloud Platform and G Suite — brought in $2.77 billion, up 52% from $1.825 billion a year prior and $2.614 billion the previous quarter. Microsoft also saw an unprecedented 775% increase in cloud usage as we reported in this previous blog article.
What was surprising about Google’s numbers was the decrease in ad revenue. The number is down significantly compared to last quarter. In Q1, Google ad revenues came to $33.76 billion, compared to $37.934 billion in Q4 2019. At first I would have assumed ad revenue would be up, with companies trying to gain more market share during the downturn, but with many companies (retail, services, etc) closed, due to the home quarantines many localities have in place, it makes sense that ad revenues are down as these organizations stop their spend on ads.
With the increase in threats and attacks from cyber criminals, and the increased use of corporate applications from the internet with working from home, another often forgotten focus point for security is around the application itself. Perhaps your organization has had to make your application more accessible to remote workers by moving it to the cloud, which makes it more accessible to attacks as well. Now is the time to think about increasing security around the application itself.
If the COVID-19 pandemic has your organization moving up the timetables to getting your applications to the cloud, it is important that security is not left behind. While hosting providers like AWS, Azure and others will tell you their platforms are secure, that security refers to their infrastructure, and does not extend to your applications running on their infrastructure.
The most effective security for applications running in the cloud is security that monitors every action taken by the application, one that runs on the same server as the application. The security platform needs to monitor the application during run-time, and offer protection for new sophisticated zero day attacks including memory based attacks, along with protection against the OWASP Top 10 vulnerabilities.
K2’s Next Generation Application Workload Protection Platform addresses today’s need for runtime security in an easy to use, easy to deploy solution. K2’s unique deterministic security detects new attacks without the need to rely on past attack knowledge, is lightweight, and adds under a millisecond of latency to the running application. To aid in quick remediation of vulnerabilities, K2 also provides detailed attack telemetry including the code module and line number being in the code being attacked, while at the same time integrating with leading firewalls to do real time attacker blocking.
Change how you protect your applications.
Find out more about K2 today by requesting a demo, or get your free trial.