Cloud App Development
Business Wire | November 02, 2023
Box, Inc. (NYSE: BOX), the leading Content Cloud, and Google Cloud today announced an expanded partnership to transform work in the enterprise with generative AI. Box will integrate with Vertex AI to build new gen AI features that help customers more efficiently process and analyze data stored in the Box Content Cloud, which is also now available to customers directly through Google Cloud Marketplace.
Enterprises today want to work with strategic technology platforms that can help them work smarter and more productively, said Aaron Levie, co-founder and CEO of Box. Google Cloud is an incredibly important partner that helps us serve our customers globally. This deepened partnership underscores our joint commitment to delivering solutions that leverage cutting edge technology to power entirely new ways for users to intelligently interact with their content and revolutionize the way businesses operate in the AI-first era.
“Generative AI can streamline some of the most time-consuming processes facing enterprises today, such as manual data entry and analysis,” said Thomas Kurian, CEO of Google Cloud. “Our expanded partnership with Box will provide customers with new tools that help them quickly process and create insights from documents stored within Box Content Cloud, saving time that users can reallocate towards more impactful work.”
New Box AI Capabilities, Powered by Vertex AI
Box has chosen to integrate with Vertex AI, Google Cloud’s unified AI platform, to help customers process and analyze data faster, create more personalized user experiences, intelligent search, and more.
Building on the earlier announcement that Box will integrate Google Cloud’s advanced large-language models (LLMs) into Box AI, Box will now use Vertex AI to help power its new metadata extraction feature. The new feature, coming first as an API, will save customers’ time inputting and maintaining data by automatically identifying and tagging key context from their documents, including matching metadata fields to attributes within a file. Soon, customers will be able to:
Automatically classify and label documents at scale to surface key insights, such as contracts nearing their expiration and invoices requiring payment within the current month.
Define metadata templates to extract information for custom use cases, such as automatically recognizing and tagging products in images or categorizing PII in specific types.
Populate defined metadata templates and integrate with ERP and CRM systems to automate workflows such as invoicing, executing contracts, client and employee onboarding, and more.
Identify and preserve critical information, such as timestamps, authorship, and document versions history, to maintain compliance protocols.
Recognize and extract metadata in different languages to ensure consistent term recognition while operating in different countries and regions.
Box is Now Available on Google Cloud Marketplace
As part of the expanded partnership, Box is now also available on Google Cloud Marketplace, making it even easier for customers using Google Cloud infrastructure to purchase Box’s content management platform. With the Box app available on Google Cloud Marketplace, eligible customers can realize key benefits including:
Reduced procurement cycles allowing for faster, smoother, and simpler buying process.
Consolidated Google Cloud billing.
Cost savings against existing Google Cloud commitments when purchased through Google Cloud Marketplace.
Box Expands Its Use of Google Cloud
Box already leverages Google Cloud as a key infrastructure provider for data storage and compute globally. Now, Box will expand its usage of Google Cloud by adopting several new services across networking, data analytics, and machine learning to deliver faster performance and higher-reliability to its customers. For example, Box is now applying:
Google Cloud as a storage option for Box KeySafe, which enables Box customers to use their own encryption key within Box. This provides customers with more choice over where they maintain their encryption keys.
Google Cloud’s global networking infrastructure to power Box network communication with customers, resulting in faster content transfers and increased productivity for customers around the world.
Cloud Bigtable for improved performance and uptime for the core data systems that power Box. This enables Box to deliver its customers with a more reliable service to secure and manage all of their content needs.
Google Cloud BigQuery to power Box's data application, analytics, and insights. With BigQuery, Box can now deliver more comprehensive data-driven insights to customers faster.
Google Workspace Integrations
The expanded partnership builds on existing integrations with Google Workspace, which lets Box customers create, collaborate, and save content in Google Docs, Sheets, or Slides from the secure Box Content Cloud platform. Additionally, the Box for Google Workspace add-on enables smooth and secure productivity and collaboration across Google Workspace, including Gmail, Google Drive, and Google Calendar. With these integrations, customers can:
Create, open, and edit content using Google Workspace’s collaboration tools directly within Box.
Add Box files directly to emails and save email attachments to Box without leaving Gmail.
Include Box files and link Box Notes directly to your Google Calendar events.
Save files in Google Drive to Box.
Apply Box’s enterprise-grade security, compliance, and governance capabilities to Google Docs, Sheets, and Slides.
About Box
Box (NYSE:BOX) is the leading Content Cloud, a single platform that empowers organizations to manage the entire content lifecycle, work securely from anywhere, and integrate across best-of-breed apps. Founded in 2005, Box simplifies work for leading global organizations, including AstraZeneca, JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia. Visit box.com to learn more. And visit box.org to learn more about how Box empowers nonprofits to fulfill their missions.
About Google Cloud
Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.
Read More
Cloud Security
Business Wire | November 03, 2023
Sysdig, the leader in cloud security powered by runtime insights, today released at SANS CyberFest 2023 the 5/5/5 Benchmark for Cloud Detection and Response, a new framework that outlines how quickly organizations should detect, triage, and respond to attacks in the cloud. Operating securely in the cloud requires a mindset shift in regard to time, and with that, cloud security programs need to hold themselves to a modernized benchmark: five seconds to detect, five minutes to correlate insights and understand what’s happening, and five additional minutes to respond. Recent findings by the Sysdig Threat Research Team published in the 2023 Global Cloud Threat Report note that, after discovering an exploitable target, malicious actors require less than 10 minutes to execute an attack.
Cloud attacks are swift and sophisticated, requiring robust threat detection and response programs that move at the speed of the cloud. On-premises attacks take 16 days on average and antiquated frameworks challenge security teams to respond to a breach within 60 minutes, which is simply insufficient for the cloud. Bad actors are exploiting the automation and scale of the cloud, along with new techniques, to accelerate all stages of an attack and inflict damage within minutes. The 5/5/5 Benchmark guides organizations to detect and respond to cloud attacks faster than adversaries can complete them.
The Challenge
Detect threats within five seconds.Organizations should be able to gather detection signals from their cloud security tools in real time to ensure visibility into ephemeral assets.
Correlate and triage within five minutes.Teams should be able to gather full context for all correlated signals within five minutes of receiving the first relevant alert.
Initiate a response within five minutes.Organizations should be able to initiate a tactical response within five minutes of confirming that an attack is in progress.
What people are saying
People are always looking for security metrics, especially when the industry evolves into new operating models. We have plenty of 'best practices,' but no real way to quantify cloud security agility — until now, said Anna Belak, Director, Office of Cybersecurity Strategy at Sysdig. The 5/5/5 Benchmark, built in partnership with our customers, industry analysts, and the Sysdig Threat Research Team, sets a new standard for operating securely in the cloud.
“As organizations move to the cloud, traditional on-premises security standards become outdated and too slow. In the cloud, both innovation and attacks happen quickly – companies need security tools, processes, and standards designed to operate at the speed of cloud-native environments,” said Phil Bues, Research Manager for IDC Cloud Security.
“I don’t want to know 15 minutes after someone breached my system. I need to know instantly so that we can shut it down before the blast radius expands,” said Kuldeep Tomar, Head of Information Security at India’s leading digital skill games company and 5/5/5 Benchmark Advisor. “To move at the necessary speed, you need to not only be alerted to the right things, but also respond appropriately. Having a benchmark gives us a goal to hold ourselves to.”
About Sysdig
In the cloud, every second counts. Attacks move at warp speed, and security teams must protect the business without slowing it down. Sysdig stops cloud attacks in real time, instantly detecting changes in risk with runtime insights and open source Falco. Sysdig correlates signals across cloud workloads, identities, and services to uncover hidden attack paths and prioritize real risk. From prevention to defense, Sysdig helps enterprises focus on what matters: innovation. Sysdig. Secure Every Second.
Read More
Cloud Security
Business Wire | October 27, 2023
Lookout, Inc., the data-centric cloud security company, today announced enhancements to its Lookout Cloud Security Platform that are designed to help organizations better discover, assess and protect their data as it moves across any network, from the endpoint to the cloud. These enhancements provide organizations with a unified solution that will expertly secure their data by maximizing visibility and protecting access across all applications.
The Lookout Cloud Security Platform, the Company’s Security Service Edge (SSE) offering, continuously monitors the risk posture of users and their devices to provide dynamic and granular zero-trust access based on the sensitivity level of apps and data, enabling organizations to protect their workers, devices, applications and data from unauthorized access and modern-day internet-based threats. Services in the platform include: Secure Private Access (ZTNA), Secure Internet Access (SWG) and Secure Cloud Access (CASB).
Lookout’s data-centric cloud security innovation helps safeguard customers’ sensitive information as it moves across networks, clouds, applications and devices:
Discover and onboard all private apps with enterprise app discovery:When it comes to protecting sensitive corporate data, ZTNA offers a far more secure approach compared to traditional VPNs.Unlike VPNs that provide access to the entire network for example, ZTNA offers granular access control, which limits users to specific applications. This reduces the overall attack surface and prevents lateral movement of threats, minimizing the risk of compromised accounts or devices compromising the entire infrastructure.Lookout Secure Private Accessdiscovers and helps onboard private applications running on an organization’s network hosted on-prem or in the cloud, and currently being accessed by a VPN. Using this functionality, IT can now see all private applications being accessed by their users and take steps to seamlessly define and enforce access and data protection policies for these apps.
Extend zero trust protection with firewall as a service:The Lookout Cloud Security Platform has an integrated cloud firewall that extends inspection of incoming and outgoing traffic across all ports and protocols, enabling granular visibility and access control into non-web traffic to stop zero-day threats. With this enhancement, customers can apply more granular security and access policies across all of their apps (web, TCP, UDP, ICMP) and both internet and intranet traffic.
Expand data classification and protection capabilities in Google Drive:Google Labels Classification expands data classification capabilities across the Lookout Cloud Security Platform through an integration with Google Drive labels. This integration helps Lookout customers classify sensitive data with Google Drive labels and enforce security policies based on these labels to protect sensitive data stored in Google Drive’s API mode.
Secure traffic and enforce policies on guest networks and IoT devices:Organizations need visibility and control over all endpoints and users within their network in order to reduce the risk of malware infections and data exfiltration through these channels. Lookout has enhanced traffic inspection capabilities, expanding data and threat protection to guest users of company networks and traffic coming from IoT devices. This helps ensure company networks are not compromised from these access points, thereby preventing data exfiltration.
Advanced threat protection from phishing and zero-day threats:Lookout has enhanced its integration with remote browser isolation (RBI) and cloud sandboxing to improve the user experience and provide robust threat protection for organizations, preventing users from accessing malicious sites and content.
“In today’s digital world, data is the lifeblood of every organization,” said Pete Finalle, Research Manager, IDC. “It is vitally important that organizations protect their data and ensure that it is secure, no matter where it resides or how it is accessed. Lookout's new cloud security features offer greater assurance to IT organizations that their data is safe and their users are protected.”
Lookout continues to innovate the Lookout Cloud Security Platform in ways that strengthen the protection of users and data from security threats and enhance the end-user experience, said Aaron Cockerill, Executive Vice President of Product, Lookout. We are the only vendor that unifies cloud and endpoint security into one platform. With this latest release, Lookout continues to build upon our strategic vision to put data security at the intersection of today’s workplace and modern cybersecurity threats.
About Lookout
Lookout, Inc. is the data-centric cloud security company that delivers zero trust security by reducing risk and protecting data wherever it goes, without boundaries or limits. Our unified, cloud-native platform safeguards corporate data across devices, apps, networks and clouds and is as adaptive and simple as the modern digital world. Lookout is trusted by enterprises and government agencies of all sizes to protect the sensitive data they care about most, enabling them to work and connect freely and safely. To learn more about the Lookout Cloud Security Platform, visit www.lookout.com and follow Lookout on our blog, LinkedIn and Twitter.
Read More