\n \n \n “. concat(self. i18n. t(‘search. voice. recognition_retry’), “\n
Google Cloud is hosting its annual security summit this week and, unsurprisingly, the company took the opportunity to release some new security features. to adopt google cloud security features.
It’s no wonder that software source chain security is popping up at this year’s event. Thanks to recent high-profile attacks, it has been in the midst of White House summits, and last week an industry organization added Google, Amazon, Ericsson, Intel, Microsoft and VMware pledged $30 million to work with the Linux and Open Source Foundation. Security Foundation for the security of open source software.
At today’s summit, Google Cloud announced the launch of its Assured Open Source Software service, which allows business and government users to access the same approved open source packages that Google uses in its projects. According to the company, those packages are scanned and analyzed. , and tested for vulnerabilities and built with Google Cloud’s Cloud Build service with SLSA compliance testing (i. e. , “Supply Chain Levels for Software Artifacts, a Framework for Protecting the Integrity of Artifacts in Software Source Chains”). These packages are also signed through Google and distributed from Google’s secure registry. “Assured OSS is helping organizations reduce the need to develop, maintain and execute a complex procedure to securely manage their open source dependencies,” Google said in today’s announcement.
Also new today is BeyondCorp Enterprise Essentials, a new edition of Google Cloud’s BeyondCorp Enterpirse Zero Trust solution that promises to “temporarily and seamlessly help organizations take the first steps toward implementing Zero Trust. “The company says it includes features like contextual access controls for SaaS applications and others connected to SAML, as well as risk and knowledge coverage capabilities, plus prevention of loss of consciousness, malware, and phishing coverage in Chrome.
Finally, Google is also launching a new Security Foundation solution for businesses that aims to make it easier for them to adopt google cloud security capabilities. It joins Google’s other out-of-the-box solutions, which have so far focused on express industries. (retail, media and entertainment, money services, etc. ) unlike this more general security-oriented package. “Get the controls you want for data protection, network security, security tracking, and more to help you protect your deployments from day one, and do so in a more cost-effective way,” Google explains.