Cloud Security Podcast
Episodes About Subscribe Voices Topics

Cloud Security Podcast

Join your hosts, Anton Chuvakin and Timothy Peacock, as they talk with industry experts about some of the most interesting areas of cloud security. If you like having threat models questioned and a few bad puns, please tune in!

cloud-security-podcast_high_res.png

Episode list

#29
August 30, 2021

Future of EDR: Is It Reason-able to Suggest XDR?

Guest:

  • Sam Curry,  Chief Security Officer @ Cybereason and Visiting Fellow @ National Security Institute
29:11

Topics covered:

  • EDR was “invented” in 2013 and we are now in 2021. What do you consider to be modern EDR components and capabilities?
  • Where has EDR fallen short on its initial hype?
  • How focused are the attackers on bypassing EDR?
  • How do you think EDR works in the cloud?
  • In your view, how would future EDR work for containers, microservices, etc?
  • Why aren’t we winning the war against ransomware?
  • XDR is an interesting concept, so how do you define XDR? Is XDR just EDR++ or is XDR SIEM 4.0?

Resources:

Read More
#28
August 23, 2021

Tales from the Trenches: Using AI for Gmail Security

Guest:

  • Andy Wen, Product Lead for Abuse & Security @ Google Cloud
25:21

Topics covered:

  • What are you doing with AI for security?
  • What kinds of security problems are addressable with AI, and which ones are harder to address with ML techniques?
  • Tell us where you’ve been surprised by AI’s success?
  • Do you expect a) AI use by adversaries and b) attacks focused on disrupting the AI use by defenders?
  • What advice would you give a PM or technical lead starting out on thinking they want to use AI to solve a problem?

Resources:

Read More
#27
August 16, 2021

The Mysteries of Detection Engineering: Revealed!

Guest:

28:29

Topics covered:

  • What is Detection Engineering? How it differs from just building rules/analytics?
  • How to convert threat intelligence into detections? 
  • How to tell good detections from bad? And perhaps also good from great?
  • How to test detections in the real world?
  • Anything special about building detections for cloud environments?
  • What do you think is the role of “rule-less” (such as ML) detections? Is “ML unicorn cavalry” coming?

Resources:

Read More
#26
August 9, 2021

EP26 SOC in a Large, Complex and Evolving Organization

Guest:

Johnathan Keith, Director of Information Security (CISO) @ ViacomCBS Streaming / Digital (at the time of the recording)

Topics:

SIEM and SOC
23:27

Topics covered:

  • What is the mission for your SOC? Has it evolved in recent years?
  • How do you rate your state of maturity in security operations?
  • I hear that your organization is complex and decentralized, how do you run a SOC in such a case?
  • How do you approach the balance of people, process and technology in your SOC?
  • What is the role of outsourcing in your SOC?
  • Is cloud included in your SOC mission scope?
  • What are the immediate things you plan to improve?

Resources:

Read More
#25
August 2, 2021

Beyond Compliance: Cloud Security in Europe

Guest:

  • John Stone, Chaos Coordinator at the Office of the CISO @ Google Cloud
27:15

Topics covered:

  • What are the top European-specific cloud migration security challenges?
  • Are there interesting cloud adoption barriers related to security in Europe?
  • Are some of these challenges more compliance than security related?
  • Do you think compliance still drives security in the cloud for European companies?
  • Do you think Europe can ever "make their own cloud"?
  • So, what do you make of this entire movement about “data sovereignty”?
Read More
#24
July 26, 2021

Linking Up The Pieces: Software Supply Chain Security at Google and Beyond

Guests:

  • Eric Brewer, VP of Infrastructure, and Google Fellow @ Google
  • Aparna Sinha, Director of Product Management @ Google Cloud
23:23

Topics covered:

  • What is software supply chain security and how is it different from other kinds of supply chain security?
  • What types of organizations need to care about it? Is supply chain security a concern for large, elite enterprises only?
  • What’s the relationship between what we’re doing here, and what SBOM is?
  • Can you talk us through a quick threat assessment of a supply chain security issue? What are the realistic threats here and who are the threat actors involved?
  • How does Google try to solve these problems internally? Have we succeeded?
  • How does this translate into our products? By the way, what’s SLSA?

Resources:

Read More
#23
July 19, 2021

Threat Detection at Google Cloud Security Summit

Guest:

No guests. Just us.

23:23

Topics covered:

  • What would you say are the most things that Chronicle is trying to address today?
  • What are the good ways to use threat intel to detect threats that do not ruin your SOC?
  • What does “autonomic” security mean, anyway? Is this a fancy way of saying “automatic” or something more?
  • For sure, “the Cloud is not JUST someone else’s computer“ - but how does this apply to threat detection?
  • What makes threat detection “cloud-native”?
  • What kinds of ML magic does your mini UEBA inside SCC use?
  • Can you really do automated remediation in the cloud?

Resources:

Read More
#22
July 12, 2021

Securing Multi-Cloud from a CISO Perspective, Part 3

Guests:

  • Phil Venables (@philvenables), Vice President, Chief Information Security Officer (CISO) @ Google Cloud 
  • Dave Hannigan, Director, Financial Services Security & Compliance @ Google Cloud 
25:11

Topics covered:

  • As a CISO, would you ever decide to use multiple clouds, if it were in your hands? 
  • How is security typically considered when companies go multi-cloud in their approach?
  • Practically, or operationally, how does one think through securing multiple public cloud environments?
  • What are the top challenges here? Different controls? Lack of tools? Confusing process? Skills on the team?
  • Would you always buy security tools from a 3rd party (not a CSP) if you have to cover more than one cloud provider?
  • Anything to add about compliance across multiple clouds?
  • What is the best approach for securing multiple SaaS services that your company uses?

Resources:

Read More
#21
July 6, 2021

Security Marketing? Every Product Needs a Story!

Guest:

Kelly Anderson, Head of Product Marketing, User Protection Services @ Google Cloud

23:23

Topics covered:

  • What is marketing, really? Why is it sometimes reviled by the technologists?
  • What makes a great marketer in cloud security?
  • What’s different about cloud security marketing, as opposed to regular old on-premise security marketing? Is there still FUD in the cloud?
  • Which things are the easiest or hardest to do in Google Cloud Security marketing?
  • How do you talk about products so they stand out from the noise?
  • How’s Google Cloud marketing helping our users stay ahead of the adversaries?

Resources:

Read More
#20
June 28, 2021

Security Operations, Reliability, and Securing Google with Heather Adkins

Guest:

Heather Adkins, Sr Director, Information Security @ Google

23:23

Topics covered:

  • Your RSA presentation has 3 pillars: zero trust, microservices, automation/zero prod, is this all you need to be secure & reliable in the modern world?
  • Let’s drill down again into the “secure and reliable” concept, are you sure that they are interrelated?
  • Is there a risk that microservices could actually increase attack surface?
  • What are the practical security upsides of “no touch production”? 
  • SRE and DevOps revolutionized IT, can we expect a similar revolution for security? Where would it come from?

Resources:

Read More