Among computer operating systems, Windows dominates, followed by MacOS and Linux. But lately, the top trio is being challenged by Google's Chrome OS, which is gaining popularity and recorded a 70% increase in business sales in 2020. Based on a Linux distribution and taking some of the basics of mobile devices, the Chrome environment is available on Chromebooks distributed by different brands.
The Chromebook adoption was greatly driven by the expansion of remote working last year. Because of its simplified functioning centered on office and business tasks, it is especially popular in the education sector and in large companies that usually provided desktops.
Strengths
The most notable security feature of Chromebooks is "sandboxing". Indeed, the sandbox mode allows each process (program, browser tab, etc.) to be isolated in its own space, having access only to essential resources (disk, RAM, etc.) for its proper running. This operating mode thus enables, for example, to limit risks coming from malicious web pages or malware.
On the other hand, Chrome OS differs from PC and Android in the way that it manages system updates. By making them automatic by default on all Chromebooks, Google considerably increases the adoption of security patches included in its new versions and thus reduces the exploitation of known vulnerabilities (CVEs).
Weaknesses
Like smartphones and unlike computers, Chromebook uses mobile applications and include access to Google Play store. As a result, it gains in competitivity and versatility, an asset for professional use. However, the application model exposes users to malware and other risks of data leakage.
Another weak entry point to Chromebook is the network. As the workforce tends to increasingly work from outside organizations’ premises, network attacks are on the rise. When connecting to open WiFis at the café, the hotel, or the airport, users are exposed to man-in-the-middle attacks, in which a third party intercepts all data transmitted over the unsecure WiFi connection.
With access to Google Play, the question of application security arises on Chrome OS, as it does on any Android and iOS device. Today, 76% of mobile data breach originate from applications.
There are three types of application threats that affect Chromebooks:
When members of your organization use Chromebooks, they are exposed to the same cyber threats as if they were working on smartphones. To protect the different entry points to your corporate data (applications, network, phishing...), it is essential to secure them.
The Pradeo Security solution meets the following needs: