Four Questions On Google App Security

Need proof that the computing world is dominated by applications engineered by search giant Google? Just stare into your laptop.

The Web-wandering public has increasingly forsaken Microsoft Outlook and Lotus Notes in favor of Gmail as their e-mail program of choice. Companies that sell software to measure website performance have a tough competitor in Google Analytics. And the list goes on.

Naturally, this makes the Google universe a tempting target for those who would exploit application security holes to infect computers with malware, steal credit card and Social Security numbers and make off with a company's intellectual property.

In this Q&A, Eran Feigenbaum, senior security manager for Google Apps, and Adam Swidler, product marketing manager for Google Apps, explain the steps Google has taken to defend their users against online evil and how, as a result, the company has become a serious contender in the security industry.

There's been some debate over whether it's truly possible to have secure cloud computing. What's the Google argument in favor of it?

Eran Feigenbaum: The reason we're doing cloud computing and we think it works is -- first of all, we see tremendous security issues with the traditional client-side server: misconfiguration, missing patches, having things turned on you didn't know you had turned on, and so on. Then there's the complexity of running multiple versions of different applications on the network. It all becomes very difficult to secure. Before joining Google in 2007, I lived that problem at my last job as CSO in a financial services organization.

Talk about what Google has done to learn from those problems.

Sign up for ITworld's Daily newsletter
Follow ITworld on Twitter @IT_world

• Email
• Print
• Share
  • Slashdot
  • Digg
  • Stumble
  • Reddit
  • Newsvine