SECURE BY DESIGN: GOOGLE'S BLUEPRINT FOR A HIGH-ASSURANCE WEB FRAMEWORK

Summary from the TLDR InfoSec newsletter

Google has thousands of web apps that it needs to protect from three fundamental weaknesses of the design of the web: lack of encryption, lack of isolation, and injection. To combat this, Google has developed a high-assurance web framework that is built upon safe coding, adaptability, and observability. This post also includes a case study and table of different key security controls and how they map to elements of the framework.