TopPodcast.com
Menu
  • Home
  • Top Charts
  • Top Networks
  • Top Apps
  • Top Independents
  • Top Podfluencers
  • Top Picks
    • Top Business Podcasts
    • Top True Crime Podcasts
    • Top Finance Podcasts
    • Top Comedy Podcasts
    • Top Music Podcasts
    • Top Womens Podcasts
    • Top Kids Podcasts
    • Top Sports Podcasts
    • Top News Podcasts
    • Top Tech Podcasts
    • Top Crypto Podcasts
    • Top Entrepreneurial Podcasts
    • Top Fantasy Sports Podcasts
    • Top Political Podcasts
    • Top Science Podcasts
    • Top Self Help Podcasts
    • Top Sports Betting Podcasts
    • Top Stocks Podcasts
  • Podcast News
  • About Us
  • Podcast Advertising
  • Contact
Not in our directory?
Add Show Here
Podcast Equipment
Center

toppodcastlogoOur TOPPODCAST Picks

  • Comedy
  • Crypto
  • Sports
  • News
  • Politics
  • True Crime
  • Business
  • Finance

Follow Us

toppodcastlogoStay Connected

    View Top 200 Chart
    Back to Rankings Page
    Technology

    Cloud Security Podcast by Google

    Cloud Security Podcast by Google focuses on security in the cloud, delivering security from the cloud, and all things at the intersection of security and cloud. Of course, we will also cover what we are doing in Google Cloud to help keep our users’ data safe and workloads secure.

    We’re going to do our best to avoid security theater, and cut to the heart of real security questions and issues. Expect us to question threat models and ask if something is done for the data subject’s benefit or just for organizational benefit.

    We hope you’ll join us if you’re interested in where technology overlaps with process and bumps up against organizational design. We’re hoping to attract listeners who are happy to hear conventional wisdom questioned, and who are curious about what lessons we can and can’t keep as the world moves from on-premises computing to cloud computing.

    Advertise

    Copyright: © Copyright Google Cloud

    • Apple Podcasts
    • Google Play
    • Spotify

    Latest Episodes:
    EP173 SAIF in Focus: 5 AI Security Risks and SAIF Mitigations May 20, 2024
    Show notes

    Guest:

    • Shan Rao, Group Product Manager, Google

    Topics:

    • What are the unique challenges when securing AI for cloud environments, compared to traditional IT systems?

    • Your talk covers 5 risks, why did you pick these five? What are the five, and are these the worst?

    • Some of the mitigation seems the same for all risks. What are the popular SAIF mitigations that cover more of the risks?

    • Can we move quickly and securely with AI? How?

    • What future trends and developments do you foresee in the field of securing AI for cloud environments, and how can organizations prepare for them?

    • Do you think in 2-3 years AI security will be a separate domain or a part of … application security? Data security? Cloud security?

    Resource:

    • Video (LinkedIn, YouTube) [live audio is not great in these]

    • "A cybersecurity expert's guide to securing AI products with Google SAIF" presentation

    • SAIF Site

    • "To securely build AI on Google Cloud, follow these best practices" (paper)

    • "Secure AI Framework (SAIF): A Conceptual Framework for Secure AI Systems" resources

    • Corey Quinn on X (long story why this is here… listen to the episode)


    EP172 RSA 2024: Separating AI Signal from Noise, SecOps Evolves, XDR Declines? May 13, 2024
    Show notes

    Guests:

    • None

    Topics:

    • What have we seen at RSA 2024?

    • Which buzzwords are rising (AI! AI! AI!) and which ones are falling (hi XDR)?

    • Is this really all about AI? Is this all marketing?

    • Security platforms or focused tools, who is winning at RSA?

    • Anything fun going on with SecOps?

    • Is cloud security still largely about CSPM?

    • Any interesting presentations spotted?

    Resources:

    • EP171 GenAI in the Wrong Hands: Unmasking the Threat of Malicious AI and Defending Against the Dark Side (RSA 2024 episode 1 of 2)

    • "From Assistant to Analyst: The Power of Gemini 1.5 Pro for Malware Analysis" blog

    • "Decoupled SIEM: Brilliant or Stupid?" blog

    • "Introducing Google Security Operations: Intel-driven, AI-powered SecOps" blog

    • "Advancing the art of AI-driven security with Google Cloud" blog


    EP171 GenAI in the Wrong Hands: Unmasking the Threat of Malicious AI and Defending Against the Dark Side May 06, 2024
    Show notes

    Guest:

    • Elie Bursztein, Google DeepMind Cybersecurity Research Lead, Google

    Topics:

    • Given your experience, how afraid or nervous are you about the use of GenAI by the criminals (PoisonGPT, WormGPT and such)?

    • What can a top-tier state-sponsored threat actor do better with LLM? Are there "extra scary" examples, real or hypothetical?

    • Do we really have to care about this "dangerous capabilities" stuff (CBRN)? Really really?

    • Why do you think that AI favors the defenders? Is this a long term or a short term view?

    • What about vulnerability discovery? Some people are freaking out that LLM will discover new zero days, is this a real risk?

    Resources:

    • "How Large Language Models Are Reshaping the Cybersecurity Landscape" RSA 2024 presentation by Elie (May 6 at 9:40AM)

    • "Lessons Learned from Developing Secure AI Workflows" RSA 2024 presentation by Elie (May 8, 2:25PM)

    • EP50 The Epic Battle: Machine Learning vs Millions of Malicious Documents

    • EP40 2021: Phishing is Solved?

    • EP135 AI and Security: The Good, the Bad, and the Magical

    • EP170 Redefining Security Operations: Practical Applications of GenAI in the SOC

    • EP168 Beyond Regular LLMs: How SecLM Enhances Security and What Teams Can Do With It

    • PyRIT LLM red-teaming tool

    • Accelerating incident response using generative AI

    • Threat Actors are Interested in Generative AI, but Use Remains Limited

    • OpenAI's Approach to Frontier Risk


    EP170 Redefining Security Operations: Practical Applications of GenAI in the SOC Apr 29, 2024
    Show notes

    Guest:

    • Payal Chakravarty, Director of Product Management, Google SecOps, Google Cloud

    Topics:

    • What are the different use cases for GenAI in security operations and how can organizations prioritize them for maximum impact to their organization?

    • We've heard a lot of worries from people that GenAI will replace junior team members–how do you see GenAI enabling more people to be part of the security mission?

    • What are the challenges and risks associated with using GenAI in security operations?

    • We've been down the road of automation for SOCs before–UEBA and SOAR both claimed it–and AI looks a lot like those but with way more matrix math-what are we going to get right this time that we didn't quite live up to last time(s) around?

    • Imagine a SOC or a D&R team of 2029. What AI-based magic is routine at this time? What new things are done by AI? What do humans do?

    Resources:

    • Live video (LinkedIn, YouTube) [live audio is not great in these]

    • Practical use cases for AI in security operations, Cloud Next 2024 session by Payal

    • EP168 Beyond Regular LLMs: How SecLM Enhances Security and What Teams Can Do With It

    • EP169 Google Cloud Next 2024 Recap: Is Cloud an Island, So Much AI, Bots in SecOps

    • 15 must-attend security sessions at Next '24


    EP169 Google Cloud Next 2024 Recap: Is Cloud an Island, So Much AI, Bots in SecOps Apr 22, 2024
    Show notes

    Guests:

    • no guests (just us!)

    Topics:

    • What are some of the fun security-related launches from Next 2024 (sorry for our brief "marketing hat" moment!)?

    • Any fun security vendors we spotted "in the clouds"?

    • OK, what are our favorite sessions? Our own, right? Anything else we had time to go to?

    • What are the new security ideas inspired by the event (you really want to listen to this part! Because "freatures"...)

    • Any tricky questions at the end?

    Resources:

    • Live video (LinkedIn, YouTube) [live audio is not great in these]

    • 15 must-attend security sessions at Next '24

    • Cloud CISO Perspectives: 20 major security announcements from Next '24

    • EP137 Next 2023 Special: Conference Recap - AI, Cloud, Security, Magical Hallway Conversations (last year!)

    • EP136 Next 2023 Special: Building AI-powered Security Tools - How Do We Do It?

    • EP90 Next Special - Google Cybersecurity Action Team: One Year Later!

    • A cybersecurity expert's guide to securing AI products with Google SAIF Next 2024 session

    • How AI can transform your approach to security Next 2024 session


    EP168 Beyond Regular LLMs: How SecLM Enhances Security and What Teams Can Do With It Apr 15, 2024
    Show notes

    Guests:

    • Umesh Shankar, Distinguished Engineer, Chief Technologist for Google Cloud Security

    • Scott Coull, Head of Data Science Research, Google Cloud Security

    Topics:

    • What does it mean to "teach AI security"? How did we make SecLM? And also: why did we make SecLM?

    • What can "security trained LLM" do better vs regular LLM?

    • Does making it better at security make it worse at other things that we care about?

    • What can a security team do with it today? What are the "starter use cases" for SecLM?

    • What has been the feedback so far in terms of impact - both from practitioners but also from team leaders?
    • Are we seeing the limits of LLMs for our use cases? Is the "LLM is not magic" finally dawning?

    Resources:

    • "How to tackle security tasks and workflows with generative AI" (Google Cloud Next 2024 session on SecLM)

    • EP136 Next 2023 Special: Building AI-powered Security Tools - How Do We Do It?

    • EP144 LLMs: A Double-Edged Sword for Cloud Security? Weighing the Benefits and Risks of Large Language Models

    • Supercharging security with generative AI

    • Secure, Empower, Advance: How AI Can Reverse the Defender's Dilemma?

    • Considerations for Evaluating Large Language Models for Cybersecurity Tasks

    • Introducing Google's Secure AI Framework

    • Deep Learning Security and Privacy Workshop

    • Security Architectures for Generative AI Systems

    • ACM Workshop on Artificial Intelligence and Security

    • Conference on Applied Machine Learning in Information Security


    EP167 Stolen Cards and Fake Accounts: Defending Google Cloud Against Abuse Apr 08, 2024
    Show notes

    Speakers:

    • Maria Riaz, Cloud Counter-Abuse, Engineering Lead, Google Cloud

    Topics:

    • What is "counter abuse"? Is this the same as security?

    • What does counter-abuse look like for GCP?

    • What are the popular abuse types we face?

    • Do people use stolen cards to get accounts to then violate the terms with?

    • How do we deal with this, generally?

    • Beyond core technical skills, what are some of the relevant competencies for working in this space that would appeal to a diverse set of audience?

    • You have worked in academia and industry. What similarities or differences have you observed?

    Resources / reading:

    • Video

    • EP165 Your Cloud Is Not a Pet - Decoding 'Shifting Left' for Cloud Security

    • P161 Cloud Compliance: A Lawyer - Turned Technologist! - Perspective on Navigating the Cloud

    • "Art of War" by Sun Tzu

    • "Dare to Lead" by Brene Brown

    • "Multipliers" by Liz Wiseman

    EP166 Workload Identity, Zero Trust and SPIFFE (Also Turtles!) Apr 01, 2024
    Show notes

    Guests:

    • Evan Gilman, co-founder CEO of Spirl

    • Eli Nesterov, co-founder CTO of Spril

    Topics:

    • Today we have IAM, zero trust and security made easy. With that intro, could you give us the 30 second version of what a workload identity is and why people need them?

    • What's so spiffy about SPIFFE anyway?

    • What's different between this and micro segmentation of your network–why is one better or worse?

    • You call your book "solving the bottom turtle" could you tell us what that means?

    • What are the challenges you're seeing large organizations run into when adopting this approach at scale?

    • Of all the things a CISO could prioritize, why should this one get added to the list? What makes this, which is so core to our internal security model–ripe for the outside world?

    • How people do it now, what gets thrown away when you deploy SPIFFE? Are there alternative?

    • SPIFFE is interesting, yet can a startup really "solve for the bottom turtle"?

    Resources:

    • SPIFFE and Spirl

    • "Solving the Bottom Turtle" book [PDF, free]

    • "Surely You're Joking, Mr. Feynman!" book [also, one of Anton's faves for years!]

    • "Zero Trust Networks" book

    • Workload Identity Federation in GCP

    EP165 Your Cloud Is Not a Pet - Decoding 'Shifting Left' for Cloud Security Mar 25, 2024
    Show notes

    Guest:

    • Ahmad Robinson, Cloud Security Architect, Google Cloud

    Topics:

    • You've done a BlackHat webinar where you discuss a Pets vs Cattle mentality when it comes to cloud operations. Can you explain this mentality and how it applies to security?

    • What in your past led you to these insights? Tell us more about your background and your journey to Google. How did that background contribute to your team?

    • One term that often comes up on the show and with our customers is 'shifting left.' Could you explain what 'shifting left' means in the context of cloud security? What's hard about shift left, and where do orgs get stuck too far right?

    • A lot of "cloud people" talk about IaC and PaC but the terms and the concepts are occasionally confusing to those new to cloud. Can you briefly explain Policy as Code and its security implications? Does PaC help or hurt security?

    Resources:

    • "No Pets Allowed - Mastering The Basics Of Cloud Infrastructure" webinar

    • EP33 Cloud Migrations: Security Perspectives from The Field

    • EP126 What is Policy as Code and How Can It Help You Secure Your Cloud Environment?

    • EP138 Terraform for Security Teams: How to Use IaC to Secure the Cloud


    EP164 Quantum Computing: Understanding the (very serious) Threat and Post-Quantum Cryptography Mar 18, 2024
    Show notes

    Guest:

    • Jennifer Fernick, Senor Staff Security Engineer and UTL, Google

    Topics:

    • Since one of us (!) doesn't have a PhD in quantum mechanics, could you explain what a quantum computer is and how do we know they are on a credible path towards being real threats to cryptography? How soon do we need to worry about this one?

    • We've heard that quantum computers are more of a threat to asymmetric/public key crypto than symmetric crypto. First off, why? And second, what does this difference mean for defenders?

    • Why (how) are we sure this is coming? Are we mitigating a threat that is perennially 10 years ahead and then vanishes due to some other broad technology change?

    • What is a post-quantum algorithm anyway? If we're baking new key exchange crypto into our systems, how confident are we that we are going to be resistant to both quantum and traditional cryptanalysis?

    • Why does NIST think it's time to be doing the PQC thing now? Where is the rest of the industry on this evolution?

    • How can a person tell the difference here between reality and snakeoil? I think Anton and I both responded to your initial email with a heavy dose of skepticism, and probably more skepticism than it deserved, so you get the rare on-air apology from both of us!

    Resources:

    • Securing tomorrow today: Why Google now protects its internal communications from quantum threats

    • How Google is preparing for a post-quantum world

    • NIST PQC standards

    • PQ Crypto conferences

    • "Quantum Computation & Quantum Information" by Nielsen & Chuang book

    • "Quantum Computing Since Democritus" by Scott Aaronson book

    • EP154 Mike Schiffman: from Blueboxing to LLMs via Network Security at Google


    Previous 1 11 12 13 14 15 30 Next

    Related Podcasts

    Reply All

    1

    Reply All Games & Hobbies
    Inside VR & AR

    2

    Inside VR & AR Gadgets
    Note to Self

    3

    Note to Self News
    BrainStuff

    4

    BrainStuff Natural Sciences
    This Week in Tech (Audio)

    5

    This Week in Tech (Audio) News
    Hands-On Tech (Audio)

    6

    Hands-On Tech (Audio) Technology
    footer-logo

    Contact Us

    Toll Free: 844-670-7747

    Links

    • Home
    • Top Charts
    • Networks
    • Apps
    • Independents Podcasts
    • Podcast Advertising
    • Podcast News
    • Contact Us
    • About Us
    • Analytics & Insights

    Stay Connected

      Privacy, Terms of Use & Our Code of Ethics Protecting Content Creators Copyrights