Google unveils “self-driving” cloud security feature

[ad_1]

All Transform 2021 sessions are now available on-demand. Look now.

Google today unveiled a number of new security solutions to protect their cloud. Announcements made at the company’s Security Summit include a new intrusion detection system, multiple integrations, and a self-contained security operations stack. Additionally, Google Cloud also announced the expansion of the availability of its risk protection program.

During a press conference and in a blog post detailing the new solutions, Sunil Potti, VP and GM for Google Cloud Security, framed the launches as part of a broader vision for invisible security within the enterprise cloud. . He explained the goal of designing all security technologies, democratizing niche security talents, and eventually disappearing silos.

Rather than essentially creating products that solve problems with other products, as is the case with most security products these days, you have to hit the reset button and embrace something fundamental, Potti said at a previous press conference. He added that they assume an error will occur and are planning so that the cloud is still safe.

Security has been the top priority for businesses, governments and users lately, particularly following an increase in large-scale and highly visible attacks such as those on SolarWinds, Kaeyesa and critical infrastructure. The year 2020 alone saw more data breaches than the previous 15 years combined, and recent research published by Tripwire found that most experts believe public cloud security is just enough. Additionally, 21% said cloud companies aren’t doing enough to protect their users.

The new security announcements are quite significant, and along with them, Google has also announced several offers related to zero trust data.

Chronicle integrates with Looker and BigQuery

Google Cloud announced the integration of Chronicle, its cloud-native security analytics platform, with two of the Google Clouds analytics platforms: Looker (acquired by Google last year) and BigQuery (which Google recently integrated with a another new cloud product, Datastream). The company says the integrations will increase Chronicles’ capabilities for reporting, compliance, data exploration, visual security workflows, security-based data science, and more.

The integration is set up to allow security teams to access five Looker-driven dashboards: Chronicle Security Overview, IOC Matches, Rule Detections, User Logins, and Data Acquisition and Integrity. Users can also easily create custom dashboards based on their metrics, according to Google Cloud.

Potti said the idea is to democratize using a tool like Chronicle and make things simple so that a security analyst doesn’t need to have a PhD, work at the NSA, or so on.

The idea is to actually bring some of the goodness of our software that powers Google, he said. But without requiring that depth of knowledge or that obligation to hire that talent.

Cloud IDS is launched to repel threats

Google Cloud also unveiled Cloud IDS, a new managed and cloud-native intrusion detection system that is said to help detect malware, spyware, command and control attacks, and other network-based threats.

Built with Palo Alto Networks advanced threat detection technologies, Google Cloud is promoting the ability of systems to detect malicious activity with few false positives. The company also claims that it’s easy to deploy in just a few clicks, and that users can create custom workflows within Google Cloud to respond to any threats the system detects.

You may have heard of self-driving data centers and so on. So this is essentially applying that construct to SOCs, Potti said.

For clients in regulated industries such as financial services and healthcare that mandate the use of an IDS, the system can be especially helpful in ensuring compliance. Cloud IDS will initially integrate with Splunk Cloud Platform, Splunk Enterprise Platform, Exabeam Advanced Analytics, The Devo Platform, and Palo Alto Networks Cortex XSOAR, with integrations for Chronicle and Google Clouds Security Command Center to come.

Autonomic Security Operations leverages the Google stack

Aiming to help customers modernize their security operations against emerging threats, Google Cloud also announced Autonomic Security Operations. A combination of products, integrations, projects, technical content and an acceleration program, Google Cloud says the new offering will enable customers to leverage both the company’s security experience and the existing Chronicle-based technology stack.

To bring Autonomic Security Operations to the managed services security market, Google Cloud is also partnering with BT. BT made headlines last year for becoming the first European network to partner with Google to deliver free games on the Stadia cloud to its users, and now the two companies are positioning this new announcement as the first step in a growing security relationship. .

The Risk Protection Program extends availability

Complementing the announcements, Google Cloud also revealed in a public preview the expanding availability of its risk protection program to all Google Cloud customers. The program helps customers connect with Google Clouds insurance partners and will offer extended availability starting July 28.

The company is framing this offering as part of its commitment to shared destiny, which means its intent to be an active partner to customers as they implement its technologies. During the press conference, Potti said, there is a security shield or guarantee that comes through this protection program that the more you can consume Google Cloud, the more you are able to provide that guarantee.

This may be true, but it also clarifies Google’s interest in getting its customers to dive deeper into its cloud. Last year, Google was the only public cloud provider to lose ground, rising from 28% to 24% of Tripwire respondents who say they use the cloud. This comes as competitors, including Amazon Web Services (AWS) and Microsoft Azure, have continued to gain market share. For businesses that are primarily or entirely cloud, Tripwire found 85% use AWS alone or as part of a multi-cloud environment.

VentureBeat VentureBeat’s mission is to be a digital town center for technical decision makers to gain insights into transformative technology and transactions. Our site provides essential information on data technologies and strategies to guide you in leading your organizations. We invite you to become a member of our community to access: up-to-date information on the topics of your interest our gated newsletters thought-leading content and discounted access to our award-winning events, such as Transform 2021: Learn more networking features and more again Become a member

[ad_2]