{"id":5515,"date":"2019-02-20T19:40:40","date_gmt":"2019-02-20T19:40:40","guid":{"rendered":"https:\/\/www.n-able.com\/?p=5515"},"modified":"2021-07-09T15:53:48","modified_gmt":"2021-07-09T14:53:48","slug":"g-suite-security-best-practices","status":"publish","type":"post","link":"https:\/\/www.n-able.com\/de\/blog\/g-suite-security-best-practices","title":{"rendered":"Google Drive Security Best Practices"},"content":{"rendered":"
\n

While people tend to compare file storage service Google Drive to its biggest competitor, Dropbox, there\u2019s a good argument to be made that the two platforms serve fundamentally different markets. Google Drive has tons of special appeal to enterprise clients: It\u2019s great for collaboration, offers 15 GB of free storage, and allows access to the entire G Suite ecosystem of apps. But none of Google Drive\u2019s features will do much good if enterprises aren\u2019t able to secure what they store on it.<\/p>\n

Businesses are responsible not only for their organization\u2019s data, but for that of their employees and customers. That means that your clients should understand Google Drive security best practices inside and out if they\u2019re going to make use of the platform\u2019s considerable advantages. In this blog post, we\u2019ll go over some common G Suite security concerns and explain what you can do to make your clients\u2019 data less vulnerable.<\/p>\n

What are some email security issues?<\/b><\/h3>\n

Some of the most widespread and financially damaging forms of cybercrime today\u00a0take place over email, underlining the importance of G Suite email security. Phishing and pharming are two of the more common types of email scams that businesses have to be on the lookout for. While they are fairly similar, it\u2019s helpful to understand the difference so you know what to look for when seeking out potential threats to the security of your Gmail account. Unlike other hacking approaches, phishing and pharming can typically be warded off through reliance on basic security best practices.\"\"<\/p>\n

Phishing is the use of deceptive tactics to get an email recipient to reveal sensitive information to a hacker. An employee might receive an email that appears to come from your HR department. The email provides a link to what it says is your company\u2019s new vacation policy. When the employee clicks on the link, they are asked to enter their G Suite credentials in order to see the document. But once they do, the employee reaches a dead end\u2014the page they signed into was a \u201cspoofed\u201d page designed by a hacker to look just like Google\u2019s sign-in page, allowing the hacker to phish your employee\u2019s credentials and gain access to all the files in your Drive.<\/p>\n

Pharming, by contrast, doesn\u2019t depend on someone clicking on a deceptive link that directs to a spoofed page. It involves the hijacking of legitimate domains so that you\u2019re redirected to web pages fabricated by the hacker, even if you typed in the URL to the legitimate domain. These attacks can only be stopped with careful attention to detail\u2014users must always be on the lookout for websites that look suspiciously different than they did during previous visits. In the case of phishing attacks, you can identify potential threats by noting modified URLs or watching for strange language or requests coming from entities you\u2019d otherwise trust.<\/p>\n

Is Google Drive data encrypted?<\/b><\/h3>\n

In some cases, it\u2019s not enough to simply take special care when entering sensitive information online\u2014and many threats require strong data encryption to ward off these attacks. Luckily, Google Drive does offer 256-bit SSL\/TLS encryption for files in motion and 128-bit AES keys for everything else, as well as two-step verification.\"\"<\/p>\n

That said, Google Drive has seen its share of security vulnerabilities exploited. Hackers have taken advantage of weak servers that don\u2019t support Google\u2019s version of encryption, and security experts note that a\u00a0man-in-the-cloud attack<\/a>\u00a0could be used to bypass encryption altogether by stealing a user\u2019s synchronization code.<\/p>\n

All this goes to show that while Google\u2019s\u00a0encryption is important<\/a>, it\u2019s best to add your own layer of third-party encryption to strengthen your defenses against clever attacks like these.<\/p>\n<\/div>\n

\n
\n
\n
\n
\n