Cloud Security Podcast by Google

View Top 200 Chart

Back to Rankings Page

Technology
**Cloud Security Podcast by Google**

Cloud Security Podcast by Google focuses on security in the cloud, delivering security from the cloud, and all things at the intersection of security and cloud. Of course, we will also cover what we are doing in Google Cloud to help keep our users’ data safe and workloads secure.

We’re going to do our best to avoid security theater, and cut to the heart of real security questions and issues. Expect us to question threat models and ask if something is done for the data subject’s benefit or just for organizational benefit.

We hope you’ll join us if you’re interested in where technology overlaps with process and bumps up against organizational design. We’re hoping to attract listeners who are happy to hear conventional wisdom questioned, and who are curious about what lessons we can and can’t keep as the world moves from on-premises computing to cloud computing.

Latest Episodes:

EP83 What Does reCAPTCHA Actually Do and How Does It Do it? Product Manager Explains Sep 12, 2022

Show notes

Guest:

Badr Salmi, Product Manager for reCAPTCHA

Topics:

What is reCAPTCHA? Aren't you guys the super annoying 'click on the busses' thing?
What is account defender? Why was this a natural next step for you?
What are the actual threats that this handles - and handles well? Specific web attacks? Web fraud?
Let's talk about account fraud, what do these attacks look like and how do bad guys monetize today?
What about payment fraud? Could you score a payment session as well as a login session risk, or is that different?
How does this work with multi factor authentication?

Recommended reading:

EP82 Mega-confused by XDR? You Are Not Alone! This XDR Skeptic Clarifies! Sep 05, 2022

Show notes

Guest:

Dimitri McKay, Principal Security Strategist @ Splunk

Topics:

How do you define that "XDR thing" that you are so skeptical about?
So within that definition of XDR, you think it's not so great, why?
If you have to argue pro-XDR, what would you say?
Two main XDR camps are "XDR as EDR+" and "XDR as SIEM-", which camp do you think is more right? Are both wrong?
What approach do you think is more useful as a lens to understand the potential upsides/downsides of XDR?
What about the cloud? "Cloud XDR" seems a bit illogical, but what do you think is the future of D&R in the cloud?

Resources:

EP81 Demystify Data Sovereignty and Sovereign Cloud Secrets at Google Cloud Aug 29, 2022

Show notes

Guest:

Christopher "CJ" Johnson, retired Fire Chief, and Global Regulated Cloud Product Lead @ Google Cloud

Topics:

In political science, they define sovereignty as a local monopoly on the legitimate use of force. Why are we talking about "sovereignty" in IT?
What is a sovereign cloud? How much of the term is marketing vs engineering?
Who cares or should care about sovereign cloud?
Is this about technical controls or paper/policy controls? Or both?
What is the role for encryption and key management and key access justifications (like say Google Cloud EKM with KAJ) for sovereign cloud?
Is sovereign cloud automatically more secure or at least has better data security?
What threat models are considered for sovereign cloud technologies?

Resources:

EP80 CISO Walks Into the Cloud: Frustrations, Successes, Lessons ... And Does the Risk Change? Aug 22, 2022

Show notes

Guest:

David Stone, Staff Consultant at Office of the CISO, Google Cloud

Topics:

Speaking as a former CISO, what triggered your organization migration to the cloud?
When did you and the security organization get brought in?
How did you plan your security organization journey to the cloud?
Did you take going to Cloud as an opportunity to change things beyond the tools you were using?
As you got going into the cloud, what was the hardest part for your organization ?
What was most surprising? Good surprise and bad surprise?
How did you design security controls for the cloud?
How do you validate and verify security controls in the cloud?
How did you incorporate your cloud environment into your SOC's responsibility
Having covered all that tactical terrain, one final strategic question: is moving to Cloud a net risk reduction? Can it be?

Resources:

EP79 Modernize Data Security with Autonomic Data Security Approach Aug 15, 2022

Show notes

Guest:

John Stone, Chaos Coordinator @ Office of the CISO, Google Cloud

Topics:

So what is Autonomic Data Security, described in our just released paper?
What are some notorious data security issues today? Perhaps common data security mistakes security leaders commit?
What never worked in data security, like say manual data classification?
How should organizations think about securing the data they migrated and the data that was created in the cloud?
Do you really believe the cloud can make data security better than data security in traditional environments?

Resources:

EP78 Classic SOC Meets Cloud: What Changes? What Stays the Same? Aug 08, 2022

Show notes

Guest:

Gorka Sadowski, Chief Strategy Officer @ Exabeam

Topics:

How do we get a legacy SOC team to think about the cloud?
How to think about cloud threat detection, in general? What is different … threats, the environment, what else? What is the same?
How do we know which TTPs are relevant for the new environments? What to bring with us to the cloud?
Do content/rules and detection engines need to be different to cover the cloud detection use cases?
What cases are appropriate for machine learning (ML) in the cloud? Does cloud threats drive the need for new ML detections?

Resources:

"11 Strategies of a World-Class Cybersecurity Operations Center" paper
"Autonomic Security Operations: How to 10X Your SOC" paper
"Indicators Of Compromise Vs. Tactics, Techniques, And Procedures" blog
"How to Build and Operate a Modern Security Operations Center" (Gartner subscription required)
"A SOC Tried To Detect Threats in the Cloud … You Won't Believe What Happened Next" blog

EP77 Operational Realities of SOAR: Automate and/or Enrich, Playbooks, Magic Aug 01, 2022

Show notes

Guest:

Cyrus Robinson, SOC Director and IR Team lead at Ingalls Information Security

Topics:

You've been using SOAR tools for years, so what do you think of the technology so far?
What is driving SOAR adoption today? And what is inhibiting SOAR adoption?
Realistically, how hard is SOAR to operationalize for a typical company?
What are your favorite SOAR playbooks to start with?
How to build, train and keep the SOAR team? Do they need to code to succeed?
We like the SOAR maturity model approach. How would you imagine a SOAR adoption maturity model?
How to implement SOAR from scratch in scaling operations? How to start? How to plan? How to not fail?

Resources:

EP76 Powering Secure SaaS … But Not with CASB? Cloud Detection and Response? Jul 25, 2022

Show notes

Guest:

Ben Johnson, CTO/co-founder @ Obsidian Security

Topics:

Why is there so much attention lately on SaaS security? Doesn't this area date back to 2015 or so?
What do you see as the primary challenges in securing SaaS?
What does a SaaS threat model look like? What are the top threats you see?
CASB has been the fastest growing security market and it has grown into a broad platform and many assume that "securing SaaS = using CASB", what are they missing?
Where would another technology to secure SaaS fit architecturally, inline with CASB or as another API-based system?
Securing IaaS spanned a robust ecosystem of vendors (CWPP, CSPM, now CNAPP) and many of these have ambitions for securing SaaS, thus clashing with CASB. Where do you fit in this battle?
For a while, you were talking more about CDR - what is it and do we really need a separate CDR technology?

Resources:

EP75 How We Scale Detection and Response at Google: Automation, Metrics, Toil Jul 18, 2022

Show notes

Guest:

Tim Nguyen, Director of Detection and Response @ Google

Topics:

I know we don't like to say "SOC" here, so why don't we talk about the role of automation in detection and response (D&R) at Google?
One SRE concept we found useful in security operations is "toil" - How do we squeeze toil out of D&R practice at Google?
A combined analyst and engineer role (just like an SRE) was critical for both increasing automation and reducing toil, how hard was it to put this into practice? Tell us about that journey?
How do we automate security signal analysis, can you give us a few examples?
D&R metrics have been a big pain point for many organizations, how does SRE thinking of SLOs and SLIs (and less about SLAs) helps us in our "not SOC"?
How do we avoid falling into the "time to respond" trap that rewards fast response, sometimes at the cost of good?

Resource:

EP74 Who Will Solve Cloud Security: A View from Google Investment Side Jul 11, 2022

Show notes

Guest:

James Luo, Partner @ CapitalG

Topics:

You've looked at hundreds of security startups at the growth stage - what is getting funded? What is not getting funded? What is the difference?
What's your view on the current market environment for security companies? Is security "recession-proof", whatever that means?
How do you think about what problems are worth solving with a new venture vs existing vendors (and/or CSPs) expanding to cover the new area?
Why do many cloud security vendors get funded and get high valuations while there is a wide perception that CSP (like us at Google) are doing security really well?
How do we solve the challenge that many organizations are barely moving off "antivirus and firewalls" security of the 1990s?
What is your best advice to cloud security startups trying to get wider adoption?

Resources:

Our TOPPODCAST Picks

Follow Us

Stay Connected

Cloud Security Podcast by Google

Related Podcasts

Links

Stay Connected