Google infrastructure is designed to ensure that information is secure throughout its entire lifecycle. Security within Google infrastructure encompasses several layers and concerns the deployment of services, the storage of data, inter-process and external communications, up to operational concerns.
Physical Layer
At the physical layer, security is ensured by:
Service deployment
At the service level, Google does not assume any trust between services running on the same infrastructure. This has a number of important consequences for service identification, authorization, and data privacy and integrity, including the following:
Data storage
Google uses encryption both at the application and the drive level. Indeed, before being stored to disk, data is encrypted using a central key management service that provides audit logs, automatic key rotation, etc. Additionally hard drives and SSDs additionally use hardware encryption and are only reused after a thorough multi-step erase process.
Internet communication
Google infrastructure is isolated from the internet and only a subset of machines are exposed to external traffic. The cornerstone of Google approach is the Google Front End (GFE), which provides a registration and publication services for all internal services that are available on the internet. GFE ensures that TLS termination is handled correctly, enforces best practices, and provides Denial of Service (DOS) protection by acting as a reverse proxy. DOS protection is effectively enforced through a dedicated, central service that oversees all incoming requests at the load balancer and can instruct it to drop or throttle attack traffic.
A key step to secure internet communication is user authentication, that manifests itself through Google login page and is backed by a central identity service. As it may be widely known, Google authentication does not rely only on username and password bu challenges any login attempt for additional information such as the device that is used, its location, etc. For increased security, Google authentication also offers support for two-factor authentication.
Additional aspects of securing Google infrastructure concerns operational security, which deals with how software is created, with protecting employees\u2019 machines and credentials, and protecting against possible threats from insiders and external actor.
A lot more of details are available on Google web site, including a list of pointers to documents covering specific areas in great detail.<\/p>\n

© Source: http:\/\/www.infoq.com\/news\/2017\/01\/google-infrastructure-security?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=news<\/a>
All rights are reserved and belongs to a source media.<\/span><\/p>\n