Threat Modeling by Service for Google Cloud Detection

There's no official term or framework or definition out there about threat modeling by service. This is just something that I started to approach as I started to do more Google cloud detection. So it starts from first of all, like looking at the service, what does it do? And then what actions are possible for this service and how can I take a look at this from both the lens of its intended usage as well as malicious usage? That could be helpful if you're using specific Google cloud services.

Transcript

Play full episode

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!

Get the app