Skip to main content

Google attacks cloud security head-on with new Google Cloud Platform features

google announces security features for cloud platform data center servers
Google
Google Cloud Platform (GCP) is the search engine giant’s cloud services offering that competes with Amazon Web Services and Microsoft Azure. Companies use GCP for a variety of tasks, from running simple websites to creating highly complex computing and network applications. To accomplish such functions, it utilizes Google’s data analytics, machine learning, computing, and other services, which are built into it.

On Thursday, at its Google Cloud Next ’17 event, the company detailed a number of updates to its cloud computing platform. One of the most important updates pertain to security — Google is implementing a number of new features aimed at making GCP and its G Suite productivity apps less prone to exploits.

First up is the new Identify-Aware Proxy, which lets GCP administrators manage access to applications running on the service on a more granular basis. This provides more secure application access than the “all-or-nothing” controls provided by VPN (virtual private network) access. Admins can allow access based on users, identity, and group, and it can be integrated with phishing-resistant security keys. The Identify-Aware Proxy is currently in beta.

Next up is the Data Loss Prevention (DLP) API, also in beta, which lets GCP admins scan for more than 40 sensitive data types for identification and redaction. The Data Loss Prevention API uses deep content analysis and allows admins to write policies managing sensitive data, and follows DLP for Gmail and Google Drive.

The Key Management System for GCP, which is now generally available, lets admins generate, use, rotate, and destroy symmetric encryption keys that are used throughout the system. GCP customers can now manage multi-tenant encryption keys without a hardware security module or without having to maintain an on-premise key management system.

Security Key Enforcement is the next feature being added, and is generally available for both GCP and G Suite. It lets admins force users to use security keys as the two-step verification factor when signing into either service.

Google Drive, Team Drives, and Google Groups now have general access to Google Vault, allowing users to establish retention policies, place legal holds, and perform searches across Drive, Gmail, Hangouts, and Groups. Search results can also be exported for legal and compliance purposes.

Finally, Google has introduced Titan, a new micro-controller that the company built specifically to “establish hardware root of trust for both machines and peripherals” in Google’s cloud infrastructure. Titan allows the secure identification and authentication of legitimate access via hardware.

Image used with permission by copyright holder

If you’re a GCP or G Suite customer, these new security features are intended to both prevent and help defend against cyberattacks, and will help users enact robust enterprise security policies. To find out more about the new security features and other enhancements to Google’s cloud platform, make sure to follow along with Cloud Next ’17.

Editors' Recommendations

Mark Coppock
Mark has been a geek since MS-DOS gave way to Windows and the PalmPilot was a thing. He’s translated his love for…
Google is bringing new Pixel 6 features to older Pixel devices
Bezel comparison of the Pixel 6 and Pixel 6 Pro.

The Google Pixel 6 and 6 Pro come with a slew of features that include new hardware, new cameras, a Google Tensor chip, and more. Some of these are based on the new Tensor chip and require the SoC to function, while the rest are based on the software. The latter set of software-based features can be ported to previous-gen Pixel devices. And Google is now working on introducing such features to the older Pixel smartphones.

"As with all Pixel features, we aim to bring as many features as possible to older Pixels where technically possible — though it might take some time to develop and offer a different experience," a Google representative told Android Authority. However, there is no firm date for rollout to older Pixels at this point in time.

Read more
5 easy ways to dramatically increase security in Google Chrome
A MacBook with Google Chrome loaded.

If you're one of many people who use Chrome as your default web browser, then you might want to take some steps to ensure that it's extra secure. This can help you in a world where hackers are always after passwords and can easily spoof websites to look like the real thing.

Well, Google has a lot of tools built right into Chrome that can help with that protection. From Safe Browsing to encrypting passwords and more, we got you covered with five easy ways to dramatically increase security in Google Chrome.
Change your Safe Browsing settings

Read more
Google’s Pixel 6 features new Pixel Pass subscription service to rival Apple One
Google Pixel 6 Image Composite.

Google is reportedly working on Pixel Pass, a subscription service for the most ardent Google superfans, according to tech YouTuber, Brandon Lee. From the description of the purported Pixel Pass, this is a financing option where Google offers users a fixed price to pay for a Pixel phone and a bundle of Google services all at once.

The concept recalls both Apple One and Apple's iPhone Upgrade Program, a service where Apple enthusiasts can purchase a bundle of all Apple services, from Apple News+ and Apple TV to Apple Music. This would do the same type of thing, bundling in YouTube Premium, Google One, Play Pass, Google Fi, and a Pixel phone to boot. There's also an extended warranty option with Preferred Care or Device Protection for those who want peace of mind. It's likely to be a U.S. exclusive, especially with the inclusion of a Fi subscription, but that's not been definitively confirmed.

Read more