谷歌云安全白皮书-2022.pdf

Google Infrastructure Security Design Overview March 2022 Table of contents Introduction 3 Secure low-level infrastructure 4 Security of physical premises 4 Hardware design and provenance 4 Secure boot stack and machine identity 4 Secure service deployment 5 Service identity, integrity, and isolation 6 Inter-service access management 6 Encryption of inter-service communication 7 Access management of end-user data in Google Workspace 7 Secure data storage 9 Encryption at rest 9 Deletion of data 10 Secure internet communication 10 Google Front End service 10 DoS protection 11 User authentication 11 Operational security