Four Questions On Google App Security

Two members of Google's application security team explain why the future belongs in the computing cloud -- and how Google Apps is dealing with the constant barrage of security threats.

» View Article

READER FEEDBACK
Preview
Christofer Hoff
Wed, 2008-12-17 02:08

Just to clarify, my position on security and cloud computing are mutually exclusive. Further, I am skeptical of companies who simply suggest that I should trust them simple "because."

Your attribution regarding my skepticism (Bill) in regards to these two disruptive innovations is accurate, but I find it very interesting that the Googleites somehow downplayed the security implications of one to seemingly distract from the other.

If I recall correctly, Google doesn't rely much on virtualization at all to power their infrastructure, so I can understand making this issue more diminutive in the response, but they didn't actually address how they go about making the cloud option more secure.

Rather, they represent that because they are "always under attack" with large volumes, we should simply trust that they are more secure. I might argue they are more efficient at certain things, but where is the transparency that reflects these assertions?

Oh, it must be because they "build in security from the ground up!" ;)

Also, the last time I looked, the Intertubes feature more than just email.

"The Cloud" and the options it offers is certainly a viable and robust choice when considering how, where and who delivers service to your company, but the abstraction it offers -- much like the notion of the "simplicity" of virtualization (if you must lump them together) -- belies the risk.

/hoff

reply
Post a comment
The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.