informa
/
Vulnerabilities/Threats
News

Google Dashboard Now Showing Security Warnings

Hoping to make its cloud services more secure, Google is extending a Gmail security mechanism to other services.
In another of an ongoing series of security enhancements, Google on Wednesday said that this week it will begin presenting warning notifications on users' Google Dashboard pages when suspicious logins occur at any service associated with one's Google Account.

"Using the IP address you provide to us, our automated system can determine your broad geographic location," explained Google product manager Yariv Adan in a blog post. "If you log in using a remote IP address, our system will flag it for you. So if you normally log into your account from your home in California and then a few hours later your account is logged in from France, you’ll get a notice like the one above at the top of your Dashboard page -- alerting you to the change and providing links for more details."




Image Gallery: Top 10 Google Videos
(click for larger image and for full photo gallery)

Google has set up its Dashboard notifications to provide a 'more details' pop-up window that provides an opportunity to change a possibly compromised password on the spot.

The notification is similar to a warning message added to Gmail back in March, which itself represented an expansion on IP log information presented to Gmail users in 2008 for similar purposes.

The reason to provide such information is to make the user aware of possible unauthorized logins and to mitigate the risk that an attacker might breach a given account and might configure it to forward copies of messages to the attacker without the account owner's knowledge.

For Google, which has been encouraging businesses to ditch on-premises computing in favor of its cloud-based services, allaying security concerns about its offerings remains an ongoing chore.

The breach disclosed by the company in January hasn't made that job any easier. In January, Google revealed that some of its intellectual property had been stolen as a result of a sophisticated cyber attack traced to China and said that one of the primary goals of the attack appeared to be to access the Gmail accounts of Chinese human rights activists.

A Google spokesperson was not able to immediately provide figures indicating the number of suspicious logins flagged by the company's system.

Recommended Reading:
Editors' Choice
Kirsten Powell, Senior Manager for Security & Risk Management at Adobe
Joshua Goldfarb, Director of Product Management at F5