[deleted]
This is just client posturing, it's been around forever before NAP from Microsoft.
Google Moves Its Corporate Applications to the Internet
11–20 of 155 posts
Re: Google Moves Its Corporate Applications to the Internet
#12I hope this means accessing internal resources will be a lot less painful too
Re: Google Moves Its Corporate Applications to the Internet
#13We tried this where I worked (with the exception of the evil desktop app financial program)... and had to retract after a zero day defacement in one of our web apps. In the meantime we also learned that keeping all of your web apps 100% up to date at all times is really freaking difficult. The good news is that the (failed) attempt got us off of a few client side applications and made us much more platform agnostic than we were before.
If you have the resources of Google it's a bit different, especially if all of the software is custom and developed internally.
Re: Google Moves Its Corporate Applications to the Internet
#14The access proxy is somewhat similar to what Cisco is doing with TrustSec. http://www.cisco.com/c/en/us/solutions/enterprise-networks/t...
Re: Google Moves Its Corporate Applications to the Internet
#15The probably falls in the general category of a Good Thing™ for employees and people developing B2B applications since internal systems are more easily accessible but, this will be a gut check/squeaky bum time for traditional on-premises B2B vendors like PeopleSoft/SAP/IBM and the like. The corporate firewall has always been a bastion of security they have been able to hide their applications behind. As the concept o…
[deleted]
Login systems are only one small part of the surface area of most applications. Admin backdoors, an absence of SSL, SQL or other injection attacks, protocol vulnerabilities, unpatched code, homegrown/weak crypto, session hijacks, and XSS attacks going to need fixing too. Applying patches in a timely manner will be essential too.
Re: Google Moves Its Corporate Applications to the Internet
#16I wonder which "cloud hosting provider" they will choose.
Microsoft? Amazon?
Does it make a difference?
If my company starts selling cloud hosting and then I announce my company will be hosting its internal applications in "the cloud" (i.e., in my own data centers), what are the security implications for my company?
Are they the same if some other company asks me to host their applications in my data centers?
Is this article a PR piece (or "submarine" as PG calls it)?
What do you think?
Re: Google Moves Its Corporate Applications to the Internet
#17What's left implied but unstated in this post is that a corporate intranet is often in practice as vulnerable as the internet -- from unpatched Windows to old Android versions to people plugging in random USB dongles to a million variations on XSS/XSRF, once you've made your corporate network secure against these attackers it's also secure against the wider internet.
I felt like that was stated clearly in the second paragraph.
> "The new model — called the BeyondCorp initiative — assumes that the internal network is as dangerous as the Internet."
Re: Google Moves Its Corporate Applications to the Internet
#18What's left implied but unstated in this post is that a corporate intranet is often in practice as vulnerable as the internet -- from unpatched Windows to old Android versions to people plugging in random USB dongles to a million variations on XSS/XSRF, once you've made your corporate network secure against these attackers it's also secure against the wider internet.
I felt like that was stated clearly in the second paragraph. > "The new model — called the BeyondCorp initiative — assumes that the internal network is as dangerous as the Internet."
You are right. I had meant they left out why the internal network is dangerous. They open with assuming it is dangerous and then discuss how to implement it.
Re: Google Moves Its Corporate Applications to the Internet
#19[deleted]
It's nothing like that. This is all about server side hardening and strict client side 2 factor auth practices.
Re: Google Moves Its Corporate Applications to the Internet
#20As a remote worker, it's delightful to see things move in this direction, as VPNs are a regular thorn in my side.
Of course, there's a certain irony that Google isn't fond of remote workers. :)