Google Online Security Blog

Landing another blow against email phishing

30 януари 2012 г.

(Cross-posted from the Gmail Blog)

Posted by Adam Dawes, Product Managerdomain spoofingtoday’s announcementSPFDKIMDMARC website

Tech tips that are Good to Know

17 януари 2012 г.

Posted by Alma Whitten, Director of Privacy, Product and Engineering(Cross-posted from the Official Google Blog)Good to Know2-step verificationsecureexplainsGood to Know websiteprivacy videosGoogle Security CenterFamily Safety CenterTeach Parents TechGoogle DashboardMe on the WebAds Preferences ManagerGoogle+ CirclesGood to Know sitesomeofthevideos
Update 1/17: Updated to include more background on Good to Know.

Expanding Safe Browsing Alerts to include malware distribution domains

1 декември 2011 г.

Posted by Nav Jagpal, Security TeamSafe Browsing Alerts for Network Administratorshere

Reminder: Safe Browsing version 1 API turning down December 1

22 ноември 2011 г.

Posted by Brian Ryner, Security Teamannouncednew version 2 APIlookup serviceearlier post

Protecting data for the long term with forward secrecy

22 ноември 2011 г.

Posted by Adam Langley, Security TeamHTTPS by default for Gmailencrypted searchforward secrecyreleased the work

Safe Browsing Alerts for Network Administrators is graduating from Labs

6 октомври 2011 г.

Posted by Nav Jagpal, Security Teamhttp://www.google.com/safebrowsing/alerts/announcedAusCert recognized our effortshere

Gmail account security in Iran

8 септември 2011 г.

Posted by Eric Grosse, VP Security Engineeringlearned last week

Change your password. You may have already been asked to change your password when you signed in to your Google Account. If not, you can change it here.
Verify your account recovery options. Secondary email addresses, phone numbers, and other information can help you regain access to your account if you lose your password. Check to be sure your recovery options are correct and up to date here.
Check the websites and applications that are allowed to access your account, and revoke any that are unfamiliar here.
Check your Gmail settings for suspicious forwarding addresses or delegated accounts.
Pay careful attention to warnings that appear in your web browser and don’t click past them.

For more ways to secure your account, you can visit http://www.google.com/help/security. If you believe your account has been compromised, you can start the recovery process here.

An update on attempted man-in-the-middle attacks

29 август 2011 г.

Posted by Heather Adkins, Information Security Managerdetectmoved quicklytaken prompt actionUpdate Aug 30:Update Sept 3:

Four Years of Web Malware

17 август 2011 г.

Posted by Lucas Ballard and Niels Provos, Google Security TeamTrends in Circumventing Web-Malware Detectionfull reportSocial Engineering Number of sites distributing Social Engineering Malware and Exploits over timeDrive-by Download Exploit Trends

Prevalence of exploits targeting specific CVEs over time Increase in IP Cloaking
Malware distributors are increasingly relying upon ‘cloaking’ as a technique to evade detection. The concept behind cloaking is simple: serve benign content to detection systems, but serve malicious content to normal web page visitors. Over the years, we have seen more malicious sites engaging in IP cloaking. To bypass the cloaking defense, we run our scanners in different ways to mimic regular user traffic.

Number of sites practicing IP Cloaking over time

New Detection Capabilities
Our report analyzed four years of data to uncover trends in malware distribution on the web, and it demonstrates the ongoing tension between malware distributors and malware detectors. To help protect Internet users, even those who don’t use Google, we have updated the Safe Browsing infrastructure over the years to incorporate many state-of-the-art malware detection technologies. We hope the findings outlined in this report will help other researchers in this area and raise awareness of some of the current challenges.