Google Intrusion Detection Service (IDS)

Main article: Firewall

2021: Google Intrusion Detection Service View

On July 22, 2021, it became known that Google it introduced a threat detection service called Google Intrusion Detection Service (IDS), which allows you to detect, malware spy software and other network threats.

However, experts believe that installing and supporting the service will require skills in operational security and significant financial investments.

Google Cloud has already implemented firewalls Cloud Armor (controls traffic between Internet and virtual private cloud client) and VPC (Firewall controls traffic inside the VPC). Now, the company has introduced another Cloud Armor Adaptive Protection feature (while in the preview stage) based on for AI detecting -attacks and attacks DDoS at the application level, such as implementing -code SQL.

At the preview stage, Cloud Armor Adaptive Protection is offered for free, but then it will require a Managed Protection Plus subscription ($3 thousand/month. for 100 protected resources).

Intrusion Detection Service analyzes network data packets coming in and out of the VPC (Virtual Private Cloud). The service is based on built-in technologies for detecting threats Palo Alto Networks and when a hazard is detected, it issues an appropriate notification to the user. On its own, it does not block traffic.

Google does not disclose the cost of the service, indicating that "payment is made as it is used and depends on two indicators" - the number of IDS installations and the volume of traffic analyzed. But judging by the cost of Managed Protection Plus, it will cost a lot.

Like Cloud Armor Adaptive Protection, at the IDS preview stage^[1] for free].

Notes