Google Cloud's Intrusion Detection Service attempts to make security 'invisible' but cost will be the big giveaway

Google has introduced a new Intrusion Detection Service together with "Adaptive Protection" for its cloud firewall, but such services make security a costly feature. The Chocolate Factory's inaugural digital security summit ran yesterday, where the company talked up its notion of "invisible security". CEO Thomas Kurian …

[Fruit and Nutcase]

Invisible intrusion

That is where Google snoops on you in as many ways as it can dream up

[Claptrap314]

Security as a Service?

On the one hand, there can be a lot of expertise brought to bear. On the other, security is one of those places where diversity is _really_ important--as we seem to see here on almost a weekly basis of late.

Given that the industry is suffering badly with far too few people considering security to be part of their job already, it's not at all clear that, even conceptually, this is a step in the right direction.

[A random security guy]

Re: Security as a Service?

Absolutely true. Google will claim that they have 3rd party validation. Been in the security business long enough to know that product schedules will run over security requirements.

[Gene Cash]

Trust your security to Google...

Then how long before Google gets bored and abandons it, leaving you with your knickers around your ankles?

[Clausewitz 4.0]

Amazing option to trust your unencrypted content to Google.

I am sure their best practices handling your data will come handy as usual.

Beware about small letters in the agreement saying they can do targeted advertise based on collected data (their business).

[Kevin McMurtrie]

Proof of Concept?

I'll be excited when GCP cleans up.

[Anonymous Coward]

Detection only...?

It is 2021 and cloud vendors + (some) security partners still don't understand the threat landscape / threat actors.

Blocking that first malware connection / patient 0 infection is the most important consideration.

This looks like a prohibitively expensive way to box-tick on an audit, without improving security posture.

[Claptrap314]

Re: Detection only...?

In the days of BYOD, how exactly do you prevent patient 0?