November 7, 2019

GWP-ASan: Sampling heap memory error detection in-the-wild

›
Posted by Vlad Tsyrklevich, Dynamic Tools Team Memory safety errors, like use-after-frees and out-of-bounds reads/writes, are a leading so...
November 6, 2019

The App Defense Alliance: Bringing the security industry together to fight bad apps

›
Posted by Dave Kleidermacher, VP, Android Security & Privacy Fighting against bad actors in the ecosystem is a top priority for Google...
November 5, 2019

OpenTitan - open sourcing transparent, trustworthy, and secure silicon

›
Posted by Royal Hansen, Vice President, Google and Dominic Rizzo, OpenTitan Lead, Google Cloud  Security begins with secure infrastructure...
October 31, 2019

How Google adopted BeyondCorp: Part 4 (services)

›
Posted by Guilherme Gonçalves, Site Reliability Engineer and Kyle O'Malley, Security Engineer  Intro This is the final post in a ser...
October 30, 2019

Protecting against code reuse in the Linux kernel with Shadow Call Stack

›
Posted by Sami Tolvanen, Staff Software Engineer, Android Security & Privacy Team The Linux kernel is responsible for enforcing muc...
October 17, 2019

Improving Site Isolation for Stronger Browser Security

›
Posted by Charlie Reis, Site Isolator The Chrome Security team values having multiple lines of defense. Web browsers are complex, and mal...
October 14, 2019

USB-C Titan Security Keys - available tomorrow in the US

›
Posted by Christiaan Brand, Product Manager, Google Cloud  Securing access to online accounts is critical for safeguarding private, finan...
October 3, 2019

No More Mixed Messages About HTTPS

›
Posted by Emily Stark and Carlos Joan Rafael Ibarra Lopez, Chrome security team Today we’re announcing that Chrome will gradually start e...
October 1, 2019

Chrome UI for Deprecating Legacy TLS Versions

›
Posted by Chris Thompson, Chrome security team [Cross-posted from the  Chromium blog ] Last October we announced our plans to remove sup...
September 17, 2019

How Google adopted BeyondCorp: Part 3 (tiered access)

›
Posted by Daniel Ladenheim, Software Engineer, and Hunter King, Security Engineer  Intro  This is the third post in a series of four,...