Cloud Security Podcast by Google

View Top 200 Chart

Back to Rankings Page

Technology
**Cloud Security Podcast by Google**

Cloud Security Podcast by Google focuses on security in the cloud, delivering security from the cloud, and all things at the intersection of security and cloud. Of course, we will also cover what we are doing in Google Cloud to help keep our users’ data safe and workloads secure.

We’re going to do our best to avoid security theater, and cut to the heart of real security questions and issues. Expect us to question threat models and ask if something is done for the data subject’s benefit or just for organizational benefit.

We hope you’ll join us if you’re interested in where technology overlaps with process and bumps up against organizational design. We’re hoping to attract listeners who are happy to hear conventional wisdom questioned, and who are curious about what lessons we can and can’t keep as the world moves from on-premises computing to cloud computing.

Latest Episodes:

NEXT Special - Google Cloud NEXT Security: What to Watch? Oct 11, 2021

Show notes

Guest:

Rob Sadowski, Trust and Security Lead @ Google Cloud

Topics:

What are the big security themes at NEXT? Is security still visible?
What about invisible security vs autonomic security? Is that just "invisible security" with a neat name?
This has got to be your fourth or fifth Next, right? What's new this year compared to last years, aside from being virtual?
Anything particularly uniquely Google we're talking about?
What to watch at NEXT, if you are a CISO?
We secure not just GCP with our tools and approaches, so what to watch if not yet a GCP client?
If you have only time for 3 security sessions, which 3 to watch?

Resources:

Google Cloud NEXT

EP34 Instrumenting Modern Application Stack for Detection and Response Oct 04, 2021

Show notes

Guest:

Matt Svensson, Senior Security Engineer @ BetterCloud

Topics:

What are the approaches for monitoring serverless and other modern application architectures?
What are the challenges with these new environments?
What approaches don't work? What can go wrong with modern stack security monitoring?
What should we watch for in a modern application stack?
Most new architecture setups are predicated on identities so is identity the center of threat detection here or not?

EP33 Cloud Migrations: Security Perspectives from The Field Sep 27, 2021

Show notes

Guest:

Elliott Abraham, Security and Compliance Specialist @ Google Cloud

Topics:

We talk about lift and shift vs cloud native, what are these and are they fair characterizations?
Is lift and shift always negative? Does it always harm security?
Are security planning needs different between them?
What are the fundamentals with security during cloud migration that you have to get right regardless?
What's your advice to a security team to help make a migration work well?
How do you account for threat model differences in the cloud? Are cloud threats being more different or more the same to the classic ones?

Resources:

"Google Cloud security foundations guide"
"The Phoenix Project" book
"Threat Models and Cloud Security" (ep12)
"Preparing for Cloud Migrations from a CISO Perspective" Part 1 (ep5) and Part2 (ep11)

EP32 Can You Ever Know Thyself: Cloud Attack Surface Management Sep 20, 2021

Show notes

Guest:

Derek Abdine, CTO @ Censys.io

Topics:

Attack Surface Management (ASM). Why do we need a new toolset and a new category? Isn't this just 1980s asset management or CMDB?
How do we find those assets that may have been misplaced by the organizations? How can any technology do this reliably?
ASM seems to often rely on network layer 3 and 4. Can't bad guys just hit the app endpoints and all your network is irrelevant then?
When you think about the threats organizations face due to unknown assets, is data theft at the top of the stack? What should organizations keep in mind as a priority here?
Who at an organization is best set up to receive, triage, investigate, and respond to the alerts about the attack surface?
Are there proactive steps organizations can take to prevent shadow IT, or are we stuck responding to each new signal? Isn't preventing new assets the same as preventing business?

Resources:

EP31 Cloud Certifications, and Cloud Security with TheCertsGuy Sep 13, 2021

Show notes

Guest:

Iman Ghanizada, Solutions Manager for Security Operations & Analytics @ Google Cloud

Topics:

What is your book "Google Cloud Certified Professional Cloud Architect All-in-One Exam Guide" about?
What was your journey into writing this book, how long did it take?
The book seems to be targeted towards Cloud Architects, but you come from a predominantly security background, how has that influenced your writing of this book?
What does this have to do with The Certs Guy (14 certs!?) and what's his mission?
What's the intersectional thinking on certificates and making our industry more accessible and inclusive? Do certs help or hurt this?
So what's your advice on certs for various career stages?
What are some of the biggest architectural challenges you've seen in the field of Cloud Security?

Resources:

EP30 Malware Hunting with VirusTotal Sep 07, 2021

Show notes

Guest:

Vicente Diaz, Threat Intelligence Strategist @ VirusTotal

Topics:

How would you describe modern threat hunting process?
Share some of the more interesting examples of attacker activities or artifacts you've seen?
Do we even hunt for malware? What gets you more concerned, malware or human attackers?
How do you handle the risk of attackers knowing how you perform hunting?
What is the role of threat research role for hunting? Do you need research to hunt well?
Does threat research power attribution?
How do you tell a good YARA rule from a bad one, and a great one?
What's the evolutionary journey for a YARA rule?
What is your view on the future of hunting?

Resources:

YARA documentation
"Deep Thinking: Where Machine Intelligence Ends and Human Creativity Begins" by Gary Kasparov

Future of EDR: Is It Reason-able to Suggest XDR? Aug 30, 2021

Show notes

Guest:

Sam Curry, Chief Security Officer @ Cybereason and Visiting Fellow @ National Security Institute

Topics:

EDR was "invented" in 2013 and we are now in 2021. What do you consider to be modern EDR components and capabilities?
Where has EDR fallen short on its initial hype?
How focused are the attackers on bypassing EDR?
How do you think EDR works in the cloud?
In your view, how would future EDR work for containers, microservices, etc?
Why aren't we winning the war against ransomware?
XDR is an interesting concept, so how do you define XDR? Is XDR just EDR++ or is XDR SIEM 4.0?

Resources:

Tales from the Trenches: Using AI for Gmail Security Aug 23, 2021

Show notes

Guest:

Andy Wen, Product Lead for Abuse & Security @ Google Cloud

Topics:

What are you doing with AI for security?
What kinds of security problems are addressable with AI, and which ones are harder to address with ML techniques?
Tell us where you've been surprised by AI's success?
Do you expect a) AI use by adversaries and b) attacks focused on disrupting the AI use by defenders?
What advice would you give a PM or technical lead starting out on thinking they want to use AI to solve a problem?

Resources:

The Mysteries of Detection Engineering: Revealed! Aug 16, 2021

Show notes

Guest:

Keith McCammon, Co-founder and Chief Security Officer, Red Canary

Topics:

What is Detection Engineering? How it differs from just building rules/analytics?
How to convert threat intelligence into detections?
How to tell good detections from bad? And perhaps also good from great?
How to test detections in the real world?
Anything special about building detections for cloud environments?
What do you think is the role of "rule-less" (such as ML) detections? Is "ML unicorn cavalry" coming?

Resources:

SOC in a Large, Complex and Evolving Organization Aug 09, 2021

Show notes

Guest:

Johnathan Keith, Director of Information Security (CISO) @ ViacomCBS Streaming / Digital (at the time of the recording)

Topics:

What is the mission for your SOC? Has it evolved in recent years?
How do you rate your state of maturity in security operations?
I hear that your organization is complex and decentralized, how do you run a SOC in such a case?
How do you approach the balance of people, process and technology in your SOC?
What is the role of outsourcing in your SOC?
Is cloud included in your SOC mission scope?
What are the immediate things you plan to improve?

Resources: