Google as a company has lots of very useful products under their eco-system. Many of them have already gained healthy users. Chrome browser is one of the successful products of Google. It recently became the second most used browse around the world.

Google has been a strong backbone for Chrome browser development. It has been one of the dream products for the company. It always stresses upon security and so for their product. Yes, we do agree that they provide lots of security for their users.

A year and half back, Google came up with a new strategy of releasing new version of Chrome browser once in every six weeks. Believe it or not, this rapid release cycle has helped them big time in gaining second most used browser spot. Even in this speedy development cycle, they always kept security as a main aspect for every release!

Chrome browser have come a long way with the emerging World Wide Web.Google has always been challenged to protects its users from the complex and rapid threats of the digital world. Wondering how they have handled those threats?

Here are the core principles, which Google is been following to keep the Chrome Browser secure from several threats:

#1. Don’t get in the way

Ensuring user safety means carefully balancing usability, capability and security. For doing it right, these aspects should all work hand-in-hand and be nearly invisible to the user. They update transparently to avoid excessive prompting, and avoid things like modal dialogs which only serve to condition users into ignoring security indicators. When security indicators are surfaced, it is done in a way that is clear and highlights the most important information, such as the hostname and SSL state in the address bar.

#2. Design for defense in depth (and more depth)

Chrome is considered to be a simple design product. It’s not so easy to do so! Designing Chrome’s security architecture was to layer defenses, and avoid single points of failure. Chrome’s sandbox architecture represents one of the most effective parts of this strategy, but it’s far from the only piece. Google has employed the best available anti-exploit technologies along with custom technologies like Safe Browsing, out-of-date plug-in blocking, silent auto-update, and verified boot on Chrome OS.

#3. Security is a team responsibility

There’s a common misconception that security can be handled as a feature or add-on component. The fact is that security of any complex piece of software is a cross-cutting concern. This is determined by millions of seemingly innocuous decisions being made by developers every day. That’s why it’s essential for every team member to be aware of secure development practices, and work with their security team throughout the lifecycle of the project. This general awareness helps in normal security review process of auditing, regression testing, and fuzzing.

#4. Speed matters

User safety depends on quickly turning around security issues, regardless of whether a vulnerability is discovered internally or reported by a third party. Google is committed to promptly addressing all security issues, and delivering fixes to our users via our fast automatic update process. This approach has allowed them to maintain an industry-leading response time to security vulnerabilities—even when dealing with such a complex and politically charged issue as an irresponsible root Certificate Authority.

#5. Be transparent

Google do not downplay security impact or bury vulnerabilities with silent fixes, because doing so serves users poorly. Instead, they provide users and administrators with the information they need to accurately assess risk. Google publicly documents their security handling process, and disclose all vulnerabilities fixed in Chrome and its dependencies—whether discovered internally or externally.

#6. Engage the community

No software is perfect, and security bugs slip through even the best development and review processes. That’s why Google is grateful for the work of the independent security research community in helping them find and fix vulnerabilities. In response, Google do their best to acknowledge and reward their contributions by ensuring proper attribution, paying out bounties, and sponsoring security conferences.

#7. Make the web safer for everyone

Security is not a zero-sum game. One browser does not succeed in security at the cost of others, and we’re all better off when the best security technologies and techniques are employed by everyone. To that end, Google work closely with standards bodies and other browser makers to raise the bar by collaborating on various standards.

Source

Well those were the best principles which should be followed by every product development company! Google does it right with their products by leveraging user comments. That’s why they are the best when it comes to security!

What do you think about these Chrome’s security principles? Are they doing it right? Share your thoughts and let us know what more do you expect. Thank you!