Protecting resources behind an authenticating proxy

Today, we’re putting our core web services behind the protections provided by U2F and Google’s account takeover and anomaly detection systems. Not only will this provide phishing resistance through the authentication proxy, but also authorization through IAM roles assigned to the user’s Google account.

Prerequisites:

• Google account
• U2F Yubikey enrolled and enforced for the users/groups that will be accessing the application.
• An hour or so.
• A global cloud that has been operating at billions of rps for decades. (Beyond the scope of this article.)

Targeted Attacks Against Corporate Inboxes – a Gmail Perspective RSA …

Millions of companies entrust Gmail to handle their emails. In this RSA 2017 talk, we will discuss the nuances surrounding company-specific attacks and highlight the defenses we put in place to counter those threats. The insights shared will inform those looking to tackle the complex security challenges posed by email within their own organizations.

Source: https://www.slideshare.net/elie-bursztein/targeted-attacks-against-corporate-inboxes-a-gmail-perspective-rsa-2017