Two members of Google's application security team explain why the future belongs in the computing cloud -- and how Google Apps is dealing with the constant barrage of security threats.
Just to clarify, my position on security and cloud computing are mutually exclusive. Further, I am skeptical of companies who simply suggest that I should trust them simple "because."
Your attribution regarding my skepticism (Bill) in regards to these two disruptive innovations is accurate, but I find it very interesting that the Googleites somehow downplayed the security implications of one to seemingly distract from the other.
If I recall correctly, Google doesn't rely much on virtualization at all to power their infrastructure, so I can understand making this issue more diminutive in the response, but they didn't actually address how they go about making the cloud option more secure.
Rather, they represent that because they are "always under attack" with large volumes, we should simply trust that they are more secure. I might argue they are more efficient at certain things, but where is the transparency that reflects these assertions?
Oh, it must be because they "build in security from the ground up!" ;)
Also, the last time I looked, the Intertubes feature more than just email.
"The Cloud" and the options it offers is certainly a viable and robust choice when considering how, where and who delivers service to your company, but the abstraction it offers -- much like the notion of the "simplicity" of virtualization (if you must lump them together) -- belies the risk.
Four Questions On Google App Security
Two members of Google's application security team explain why the future belongs in the computing cloud -- and how Google Apps is dealing with the constant barrage of security threats.
» View Article
Just to clarify, my position on security and cloud computing are mutually exclusive. Further, I am skeptical of companies who simply suggest that I should trust them simple "because."
Your attribution regarding my skepticism (Bill) in regards to these two disruptive innovations is accurate, but I find it very interesting that the Googleites somehow downplayed the security implications of one to seemingly distract from the other.
If I recall correctly, Google doesn't rely much on virtualization at all to power their infrastructure, so I can understand making this issue more diminutive in the response, but they didn't actually address how they go about making the cloud option more secure.
Rather, they represent that because they are "always under attack" with large volumes, we should simply trust that they are more secure. I might argue they are more efficient at certain things, but where is the transparency that reflects these assertions?
Oh, it must be because they "build in security from the ground up!" ;)
Also, the last time I looked, the Intertubes feature more than just email.
"The Cloud" and the options it offers is certainly a viable and robust choice when considering how, where and who delivers service to your company, but the abstraction it offers -- much like the notion of the "simplicity" of virtualization (if you must lump them together) -- belies the risk.
/hoff
Dirty Tricks: Social Engineers' Favorite Pickup Lines
Tabletop Exercises: 3 Sample Scenarios
19 Ways to Build Physical Security Into Your Data Center
Get instant notifications when whitepapers, webcasts and case studies are added to our library. Sign up for a Resource Alert now!
CSO Corporate Partners
» More blogs
CSO Perspectives
Santa Clara, California
(ISC)2 members can earn up to 24 CPE Credits!
Trend Micro ranked #1 against real-world malware. Read more.
64-page prescriptive guide to security, compliance, and IT operations.
Removing Barriers To Better Server Virtualization Efficiency
Mining for Gold: Cybercrime Prevention and the Role of Log Management
The Executive Guide to Data Loss Prevention
Organizations can spend up to 50% more on compliance efforts than necessary.
White Paper: A Security Blueprint Delivered From within the Network
Read the RSA report: Security for Business Innovation
Upgrading to VMware vSphere with vWire
Explore the increasing importance of log management as cybercrime threats grow.
The Tripwire HIPAA Solution: Meeting the Security Standards Set Forth in Section 164
Implementing Best Practices for Web 2.0 Security
Five Ways to Reduce Your IT Audit Burden
THE IDG NETWORK