Abordagem de segurança com várias camadas

Loading...

Из курса от партнера Google Cloud

Google Cloud Platform Fundamentals: Core Infrastructure em Português Brasileiro

2 оценки

Google Cloud

Google Cloud Platform Fundamentals: Core Infrastructure em Português Brasileiro

2 оценки

<<< ATTENTION >>> Learners interested in Google Cloud Platform can continue to learn in either of our latest GCP infrastructure specializations. Option 1: The Developing Applications with Google Cloud Platform Specialization is available on Coursera. This brand-new Specialization teaches you to build secure, scalable, and intelligent cloud-native applications. Visit https://www.coursera.org/specializations/developing-apps-gcp for more details. Option 2: The Architecting with Google Cloud Platform Specialization is also available. This Specialization has updated, improved content that will help you if you are preparing for the Google Certified Professional - Cloud Architect exam. Head to https://www.coursera.org/specializations/gcp-architecture to explore the updated content. Google Cloud Platform Fundamentals: Core Infrastructure covers the fundamentals of Google Cloud Platform and is the first course in both specializations. This course introduces you to important concepts and terminology for working with Google Cloud Platform (GCP). You learn about, and compare, many of the computing and storage services available in Google Cloud Platform, including Google App Engine, Google Compute Engine, and Google Container Engine. Notes: • You'll need a Google/Gmail account and a credit card or bank account to sign up for the Google Cloud Platform free trial (Google services are currently unavailable in China). • If you are a Google Cloud Platform customer with European Union (EU) and Russian billing addresses, read the VAT Overview documentation at: https://cloud.google.com/billing/docs/resources/vat-overview • More Google Cloud Platform free trial FAQs are available at: https://cloud.google.com/free-trial/

Из урока

Apresentamos o Google Cloud Platform

O Google Cloud Platform oferece quatro tipos principais de serviço: computação, armazenamento, Big Data e aprendizado de máquina. Este curso tem como foco principalmente os dois primeiros tipos de serviço, além da rede de nuvem privada virtual (VPC, na sigla em inglês) do Google. Neste módulo, apresentamos aos alunos os princípios básicos do Google Cloud Platform, traçamos a evolução da computação em nuvem e explicamos por que a abordagem do Google é única. No módulo, também apresentamos os principais conceitos estruturais das regiões e zonas.

Conheça os princípios básicos do GCP0:47

O que é computação em nuvem?1:20

Como chegamos até aqui?1:45

Toda empresa é uma empresa de dados0:26

Arquiteturas de computação do GCP1:23

A rede do Google0:44

Regiões e zonas do GCP1:59

Responsabilidade ambiental1:13

Inovações nos preços1:38

APIs abertas1:22

Por que escolher o Google Cloud Platform?1:04

Abordagem de segurança com várias camadas3:48

Познакомьтесь с преподавателями

Google Cloud Training

Because Google has seven services with more than a billion users,

you can bet security is always on the minds of Google's employees.

Design for security is pervasive,

throughout the infrastructure, the GCP and Google services run-on.

Let's talk about a few ways Google works to keep customers data safe.

Starting at the bottom and working up.

Both the server boards and

the networking equipment in Google data centers are custom designed by Google.

Google also designs custom chips,

including a hardware security chip called Titan

that's currently being deployed on both servers and peripherals.

Google server machines use

cryptographic signatures to make sure they are booting the correct software.

Google designs and builds its own data centers which

incorporate multiple layers of physical security protections.

Access to these data centers is limited to

only a very small fraction of Google employees not including me.

Google's infrastructure provides cryptographic privacy and

integrity for remote procedure called data-on-the-network,

which is how Google services communicate with each other.

The infrastructure automatically encrypts our PC traffic in transit between data centers.

Google central identity service which usually manifests to end users as

the Google log in page goes beyond asking for a simple username and password.

It also intelligently challenges users for additional information based on

risk factors such as whether they have logged in

from the same device or a similar location in the past.

Users can also use second factors when signing in,

including devices based on the universal second factor U2F open standard.

Here's mine. Most applications like Google access

physical storage indirectly via

storage services and encryption is built into those services.

Google also enables hardware encryption support in hard drives and SSDs.

That's how Google achieves encryption at rest of customer data.

Google services that want to make themselves available on the Internet

register themselves with an infrastructure service called the Google front end,

which checks incoming network connections for correct certificates and best practices.

The GFE also additionally,

applies protections against denial of service attacks.

The sheer scale of its infrastructure,

enables Google to simply absorb many denial of service attacks,

even behind the GFEs.

Google also has multi-tier,

multi-layer denial of service protections that

further reduce the risk of any denial of service impact.

Inside Google's infrastructure,

machine intelligence and rules warn of possible incidents.

Google conducts Red Team exercises

simulated attacks to improve the effectiveness of it's responses.

Google aggressively limits and actively monitors the activities of

employees who have been granted administrative access to the infrastructure.

To guard against phishing attacks against Google employees.

Employee accounts including mine require use of U2F compatible security keys,

I don't forget my keys as much as I used to.

To help ensure that code is as secure as

possible Google stores its source code

centrally and requires two party review of new code.

Google also gives its developers libraries that keep

them from introducing certain classes of security books.

Externally, Google also runs a vulnerability rewards program,

where we pay anyone who is able to discover and

inform us of bugs in our infrastructure or applications.

Ознакомьтесь с нашим каталогом

Присоединяйтесь бесплатно и получайте персонализированные рекомендации, обновления и предложения.

Coursera делает лучшее в мире образование доступным каждому, предлагая онлайн-курсы от ведущих университетов и организаций.

© Coursera Inc., 2018 Все права защищены.

Загрузить из App Store

Загрузить в Google Play