Cloud Security Podcast

The Role of Cloud Security Research in 2024

Oct 2, 2024

Scott Piper is a leading cloud security researcher at Wiz, known for his insights into vulnerabilities within cloud environments. He discusses the crucial role of cloud security research as distinct from traditional security testing. Scott explains how his team enhances detection tools and safeguards data while navigating multi-tenant challenges. Additionally, he shares about request collapsing and the evolving collaboration between developers and security teams, highlighting proactive measures that are shaping the future of cloud security.

35:26

Creator website

Episode guests

Scott Piper

AI Summary

AI Chapters

Episode notes

Podcast summary created with Snipd AI

Quick takeaways

Cloud security research teams play a crucial role in identifying vulnerabilities and enhancing detection tools to safeguard cloud environments.

Organizations must prioritize effective communication between development and security teams to integrate security practices into their cloud deployment processes.

Deep dives

Role of Cloud Security Research Teams

The core responsibility of cloud security research teams involves building detection capabilities to identify misconfigurations within cloud environments. These teams focus on developing tools that help monitor cloud security and generate alerts based on their findings. They frequently engage with the broader cloud security community, utilizing social media and blogs to stay current on emerging threats and best practices. Additionally, their work includes writing blog posts and presenting findings at conferences to share insights into security challenges and effective solutions.

Intro

3min

Understanding Cloud Security Research

8min

Evolution of Cloud Security Practices

18min

Exploring Personal Passions and Memorable Journeys

2min

The Evolution and Success of Ford CloudSec Conference

3min

Exploring Cloud Security Research and Resources

2min

Why does Cloud Security Research matter in 2024? At fwd:cloudsec EU in Brussels, we sat down with Scott Piper, a renowned cloud security researcher at Wiz, to discuss the growing importance of cloud security research and its real-world impact. Scott spoke to us about the critical differences between traditional security testing and cloud security research, explaining how his team investigates cloud providers to find out vulnerabilities, improve detection tools, and safeguard data.

Guest Socials:⁠ ⁠⁠⁠⁠⁠⁠Scott's Linkedin + Scott's Twitter

If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:

- ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Cloud Security Podcast- Youtube⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

- ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Cloud Security Newsletter ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

- ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Cloud Security BootCamp

Questions asked:

(00:00) Introduction

(02:07) A bit about Scott Piper

(02:48) What is a Cloud Security Research Team?

(04:30) Difference between traditional and Cloud Security Research

(07:21) Cloud Pentesting vs Cloud Security Research

(08:10) What is request collapsing?