公司信息
Google 安全性及产品安全
跳转到:
Google 的安全理念
As a provider of software and services for many users, advertisers and publishers on the
Internet, we recognize how important it is to help protect your privacy and security. We
understand that secure products are instrumental in maintaining the trust you place in us
and strive to create innovative products that both serve your needs and operate in your
best interest.
This includes everybody:
the people who use Google services (thank you all!), the software developers who make our
applications, and the external security enthusiasts who keep us on our toes. These
combined efforts go a long way in making the Internet safer and more secure.
有关 Google 在互联网安全问题上的最新动态和分析见解,请访问我们的在线安全博客。
报告安全问题
如果您是 Google 用户,想要报告一个与您的个人 Google 帐户相关的安全问题,请访问我们的联系信息网页。此类安全问题可以包括密码问题、登录问题、垃圾内容举报、涉嫌欺诈和帐户滥用问题。
If you believe you have discovered a vulnerability in a Google product or have a security
incident to report, email security@google.com.
Please include a detailed summary of the issue, including the name of the product (e.g.,
Gmail) and the nature of the issue you discovered. Be sure to include an email address
where we can reach you in case we need more information. Upon receipt of your message we
will send an automated reply that includes a tracking identifier. We value the security
of Google services as well as your privacy when you report vulnerabilities or incidents
to us. If you feel the need, please use our public key to encrypt your
communications with us when sending email to security@google.com.
我们认为,出于互联网用户整体安全性的考虑,比较好的做法是:私下通知供应商,告知他们的产品存在安全漏洞,然后根据漏洞的严重程度设定合理的披露截止日期。有关我们对披露安全漏洞的更多看法,请参阅此处。
齐心协力,为所有用户提供更安全的在线体验。
我们非常重视安全问题,对于可证实的安全问题,我们会立即做出答复,以便解决这些问题。我们有些产品比较复杂,因此需要一些时间才能更新。在正常接到有关合法问题的通知后,我们会立刻向您确认已收到电子邮件报告,然后指定相应人员开始调查问题,从而尽快解决可能存在的问题。
我们已经意识到,想要在安全方面做好,就要发挥集体的力量。
致谢
关注安全问题的个人和组织对于提高在线体验的质量做出了巨大的贡献。我们代表数百万用户,向以下提供了宝贵帮助的个人和组织表示衷心感谢:
在制定漏洞奖励计划后,我们还制作了新的名人堂网页,以便在其中对用户所做的贡献进行公开致谢。
For contributions to the Chromium project, on which the Chrome browser is based, visit the Chromium security page.
持续的支持
- Martin Straka
- Yahoo! Paranoids
- Alex Eckelberry, Sunbelt Software
- Yair Amit, IBM Rational Application Security
- Stephen Sclafani
- Team Cymru
- Masato Kinugawa
- Christian Matthies
- Wladimir Palant, http://adblockplus.org/
- Szymon Gruszecki
- Neal Poole
- Nir Goldshlager, Avnet Information Security Specialist
- Nils Juenemann
2010
- Dr. Marian Ventuneac, http://www.ventuneac.net
- Daniel LeCheminant, Fog Creek Software
- Vincent OLLIVIER
- Yair Amit, IBM Rational Application Security
- Niels Ingen Housz
- Wladimir Palant, http://adblockplus.org/
- Tielei Wang from ICST-ERCIS (Engineering Research Center of Info Security, Institute of Computer Science & Technology, Peking University / China), reported through Secunia
- José Antonio Vázquez González (Telecom. Engineer from Linares/Spain), http://spa-s3c.blogspot.com/
- wushi of team509
- Sergey Glazunov
- kuzzcc
- Aki Helin, OUSPG
- Timothy D. Morgan of VSR
- Billy Rios
- Adam Bacchus, NetSPI
- Hans Schmucker of TWnet
- Pedro Liberal Fernández
- Szymon Gruszecki, Cracow University of Technology, Poland
2009
- Gabriel Campana
- Kacper Kwapisz
- TippingPoint’s Zero Day Initiative
- Roi Saltzman
- Michael Schmidt, Compass Security Switzerland
- Inferno, SecureThoughts.com
- Jason Carpenter, Chris Rohlf, Eric Monti–Matasano Security
- Eduardo Vela Nava (sirdarckcat)
- Mozilla Security
- Will Dormann of CERT
- Radoslav (Radi) Vasilev, Cigital
- Francisco Falcon from CORE Security
- David Weston and Microsoft Vulnerability Research
- Fernando Muñoz Sánchez
- Luis Santana of hacktalk.net
- Aviv Raff
- Mike Bailey, Foreground Security
- Isaac Dawson
- Tokuji Akamine, Symantec
- Alessandro Armando, Roberto Carbone, Matteo Grasso, Alessandro Sorniotti with the AVANTSSAR project
2008
- Finjan
- Yair Amit, IBM Rational Application Security
- Rotem Bar
- Jeremiah Grossman
- Alessandro Armando, Roberto Carbone, Luca Compagna, Jorge Cuellar, Llanos Tobarra Abad with the AVANTSSAR project
- William Enck, Machigar Ongtang, and Patrick McDaniel, SIIS Laboratory, Penn State University
- Chris Boyd, FaceTime Communications
上一页
- Johannes Fahrenkrug
- Richard Forand
- Bryan Jeffries
- Hidetake Jo
- Kwok Yat-Hong (郭逸康)
- Fraser Howard, Sophos
- H.D. Moore
- Wayne Porter, FaceTime Communications
- Alex Shipp, Messagelabs
- Castlecops
- Christian Matthies
