{"id":92762,"date":"2023-06-12T21:35:51","date_gmt":"2023-06-12T21:35:51","guid":{"rendered":"https:\/\/www.techrepublic.com\/?p=4114185"},"modified":"2023-06-12T21:35:51","modified_gmt":"2023-06-12T21:35:51","slug":"googles-chromeos-aims-for-enterprise-with-security-and-compatibility","status":"publish","type":"post","link":"https:\/\/cloudnewshub.com\/?p=92762","title":{"rendered":"Google\u2019s ChromeOS aims for enterprise with security and compatibility"},"content":{"rendered":"<figure id=\"attachment_4114188\" aria-describedby=\"caption-attachment-4114188\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-4114188\" src=\"http:\/\/cloudnewshub.com\/wp-content\/uploads\/2023\/06\/googles-chromeos-aims-for-enterprise-with-security-and-compatibility.jpg\" alt=\"ChromeOS\" width=\"1400\" height=\"789\"><figcaption id=\"caption-attachment-4114188\" class=\"wp-caption-text\">Adobe Stock by: Monticellllo<\/figcaption><\/figure>\n<p>During the <a href=\"https:\/\/io.google\/2023\/\">Google I\/O<\/a> event last month, the global tech giant showed off new elements of ChromeOS, focused on security, ecosystem and user experience, as well as benefits of the <a href=\"https:\/\/cloud.google.com\/blog\/products\/chrome-enterprise\/extending-chrome-enterprise-through-new-security-partner-integration\">Chrome Enterprise Connectors Framework\u2060<\/a>. The framework lets organizations integrate vendors, including security providers, with Chrome browser and ChromeOS using APIs and \u201cconnectors\u201d \u2013 with the goal of making it easier for organizations to control who has access to data. The connectors framework is also designed to help endpoint management vendors manage Chrome browsers on Windows, Linux or Mac devices.<\/p>\n<p>The company also unveiled:<\/p>\n<p>Thomas Riedl, product director and head of ChromeOS Enterprise and Education spoke to TechRepublic about ChromeOS, its security posture and growth strategy, including ChromeOS devices\u2019 presence in enterprises (the company reported a 22% growth in sales of enterprise devices in 2022 versus the prior year).<\/p>\n<div>\n<dl id=\"attachment_4114195\">\n<dt><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/cloudnewshub.com\/wp-content\/uploads\/2023\/06\/googles-chromeos-aims-for-enterprise-with-security-and-compatibility-1.jpg\" alt width=\"1400\" height=\"933\"><\/dt>\n<dd>Thomas Riedl, product director and head of ChromeOS Enterprise and Education (Courtesy: Google)<\/dd>\n<\/dl>\n<\/div>\n<p>TR: What is the secret sauce of ChromeOS for enterprise?<\/p>\n<p>Riedl: We are actually early in the journey in enterprise spaces. When we started Chromebooks, we started with quite a bold vision of where computing is headed: we saw the world moving to the cloud and we saw that the old way of doing computing wouldn\u2019t be suitable for that. Also, we very much designed ChromeOS for the world Google was building and investing in.<\/p>\n<p><strong>SEE: <a href=\"https:\/\/www.techrepublic.com\/article\/install-docker-chromeos\/\">How to install Docker on ChromeOS<\/a><\/strong><\/p>\n<p>TR: The Chrome Enterprise Connectors Framework \u2014this sounds to me a little like an XDR-based platform approach, where single-point solutions are integrated through a platform.<\/p>\n<p>Riedl: The Connectors Framework is a big name for what is essentially our way of introducing third-party services to our operating system in a secure way.<\/p>\n<p>TR: Security vendors like Splunk or Crowdstrike?<\/p>\n<p>Riedl: We had a big announcement with CrowdStrike recently, and really what it came down to is CrowdStrike usually does the following: when they need to have visibility of, say networked Windows devices, they run their own agent in the background, which may or may not slow the system down, and then will try to collect the data and report suspicious activity back up to the system admin. What we did was a very different approach. We went to CrowdStrike and asked them what data they will need. Meaning we would not have to run their agents. The Connectors Framework gives them the API that provides all of the data they need to do their magic using their services, their dashboards by which they can communicate to their customers.&nbsp; And so we surface these events to them, and then they can do whatever they need with that data.<\/p>\n<p>TR: Is this a custom API? A vendor-agnostic interface?<\/p>\n<p>Riedl: It\u2019s called Telemetry API, designed based on the needs of the vendor. What we found is that one of the reasons \u2014&nbsp; when you use a Windows PC, and it immediately gets dramatically slower when an admin is done with their work, is that they have to add antiviruses, XDR, or DLP.<\/p>\n<p>And every vendor is like, \u2018my agent is pretty lean,\u2019 but it adds up. And suddenly these vendor agents are eating hundreds of MBs of RAM, which is a difficult proposition to maintain.<\/p>\n<p>TR: How successful is Chromebook for enterprise? Who is the ideal customer?<\/p>\n<p>Riedl: So we go big after the frontline workforce, which constitutes 90% of the computing in the world, but it may not be incredibly obvious to us every day: this could be nurses, doctors, hospitals, shift workers on a manufacturing line, it could be reception workers. It can even include unattended signage kiosks.<\/p>\n<p>TR: Why is ChromeOS and Chrome hardware \u2014 Chromebooks \u2014 the right solution for this workforce?<\/p>\n<p>Riedl: The reason we think we have a fantastic solution here is because security is paramount. But, these positions on the frontline often have high turnover, with sensitive customer data to protect and they need something that just works, a thin client system.<\/p>\n<p>TR: How is the security model for ChromeOS unique from other operating systems?<\/p>\n<p>Riedl: It is at the heart of ChromeOS, in which the browser is where all activities, tasks and computing takes place. It\u2019s effectively a Linux architecture, but with our own components, starting with what we call Verified Boot. And a framework involving constant checks against the status of the OS \u2014 has it been tampered with? Also, no matter which OEM ships our system, we are actually able to update the operating system on our own terms, whenever we think it\u2019s needed. The entire operating system comes as a package that we constantly update and keep secure and check against.<\/p>\n<p>TR: Don\u2019t customizations have to be driven by the OEM?<\/p>\n<p>Riedl: Typically for other operating systems, the device maker would add their own user interface, drivers and systems. Then they package it up and take care of the updates themselves. For example, the way Samsung handles Android updates, they control at what point in time they ship an update to their phones, which would be whenever their engineers are ready. It might be every year, it might be every half year.<\/p>\n<p>TR: How is the software update lifecycle different for ChromeOS?<\/p>\n<p>Riedl: In ChromeOS we\u2019ve taken a very different approach: We ship an update to the operating system every four weeks; that binary block comes from us and we do all the work\u2013 it\u2019s done seamlessly in the background so the user can continue to be productive and not look at a spinning wheel for 45 minutes. So the OEM actually is not involved.<\/p>\n<p>TR: So you treat the OS as a unit, like swapping out the entire battery pack in a car when one cell needs an update? Wouldn\u2019t this take a lot of time for each instance?<\/p>\n<p>Riedl: Our updates take five seconds, which is very different to how Windows and Mac do it. We actually download the entire new version of the operating system. It just takes a reboot.<\/p>\n<p>It\u2019s core to the way we have designed the system partitions \u2014 our architecture is such that a new version is something that we effectively swap out like a puzzle piece.<\/p>\n<p>TR: How does this monthly ChromeOS replacement differ from typical cadence for software upgrades?<\/p>\n<p>Riedl: Typically, development in software engineering usually runs on a yearly cadence, with a big event to launch the next iteration. But we believe your computer should continually improve; we actually don\u2019t want you to have to wait for the keynote. Thanks to this architecture \u2014 how the OS is partitioned and how we put it all together \u2014 we have been able to make some very bold claims: we\u2019ve never had a successful ransomware attack on ChromeOS; we have never had our system compromised, even though we have a very generous bug-bounty program in place.<\/p>\n<p>TR: But I\u2019m also wondering about risks inherent in a fast software upgrade cadence because of questions about source code dependencies. Or is this extraneous because of how Google develops software?<\/p>\n<p>Riedl: Well, what I can tell you is, our software cycle is such that we don\u2019t just give you something untested; we have gone through multiple development phases that we\u2019re doing out in the open. So fundamentally, ChromeOS is tested, probed, challenged and pen tested by the community.<\/p>\n<p> <!-- default newsletter at the end --> <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Adobe Stock by: Monticellllo During the Google I\/O event last month, the global tech giant showed off new elements of ChromeOS, focused on security, ecosystem and user experience, as well as benefits of the Chrome Enterprise Connectors Framework\u2060. The framework lets organizations integrate vendors, including security providers, with Chrome browser and ChromeOS using APIs and [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":92763,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[40,783,154],"tags":[],"class_list":["post-92762","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud","category-cloudsync","category-google"],"_links":{"self":[{"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/posts\/92762","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=92762"}],"version-history":[{"count":0,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/posts\/92762\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=\/wp\/v2\/media\/92763"}],"wp:attachment":[{"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=92762"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=92762"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cloudnewshub.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=92762"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}