2024年云原生安全报告（英）-49页

2024REPORTTheStateofCloud-NativeSecurityEXECUTIVESUMMARYWhileagiledevelopment,open-sourcesoftware,andcloud-nativetechnologiesARetrospectgainedmomentumin2023,attacksonthetargetingtheapplicationlayerhavePreviousYearbecomeanestablishedtrend.Thecloud-nativeecosystemgrappledwithaWebeginourexplorationofthesurgeinsupplychainattacks,highlighting2024stateofcloud-nativesecuritytheprevalenceofvulnerabilitiesinwithalookbackattheeventsandopen-sourcesoftwareandthird-partyinfluencesof2023,eachofwhichlibraries.Real-worlddataanalyzedbyfactorsintoourcurrentpostures,ourUnit42teamenhancedthispicture,thechallengesweconfront,andidentifyingthecloudasthedominantthestrategieswe’vechosentoattacksurface,with80%ofmedium,achieveourdesiredoutcomes.high,andcriticalexposuresfoundincloud-hostedassets.1Forsometime,we’veprioritizedapplicationandinfrastructuresecurity.Butwemustn’tforgetthatthird,all-importantballintheair.Withtheglobaldataspherereaching120zettabytesin2023,2securingsensitivedataremainsmissioncritical.Thechallengesofmonitoringandcontrollingsensitiveinformation,however,haveescalated.1CortexXpanseASMThreatReport20232DataCreatedWorldwide2010-20252TheStateofCloud-NativeSecurityCloudsecurityisasmuchabusinessgoalasanythingelseweendeavortoachieve.What’smore,generativeAIemergedinButchallengesarenotnewtous.It’s2023asagroundbreakingfor...