Cloud Security Podcast by Google

Josh Liburdi, a Staff Security Engineer at Brex, dives deep into the concept of security data fabric and its transformative impact on security data management. He explains how this innovative technology shifts organizations from outdated syslog methods to modern data pipelines, improving log quality for threat detection. Josh discusses the importance of vendor selection and balancing costs with security needs, alongside the potential future of decoupled Security Information Management systems and the integration of open-source solutions.

Royal Hansen, the CISO of Alphabet, dives deep into Google's unique security culture and infrastructure. He discusses the challenges and advantages of operating at massive scale, highlighting the need for proactive security by design. Hansen shares insights on scaling teams effectively, utilizing AI for threat detection, and cultivating a resilient security environment. He also reflects on surprising aspects of Google's internal culture that could benefit the broader industry, emphasizing the importance of discipline and system design.

In a compelling discussion with Dor Fledel, founder and CEO of Spera Security, he dives into the nuanced role of identity in cloud security. He explains the challenges of identity management, addressing concepts like 'identity management debt.' Fledel shares advice on how organizations can navigate this debt while stressing the importance of monitoring user identities, service accounts, and API keys. He also offers insights for founders transitioning from startup to acquisition, emphasizing the need for focus and repeatability in security practices.

Nicole Beckwith, a Sr. Security Engineering Manager at Kroger, shares her insights into leading successful Security Operations Centers. She emphasizes the importance of self-leadership and adaptability in fostering high-functioning teams while tackling burnout. Nicole discusses innovative, human-centric hiring strategies that value unique qualities over traditional metrics. She also dives into the evolution of SIEM technology, highlighting its transition towards AI-driven solutions. Finally, she outlines a strategic 70-30-90 day plan for new SOC leaders to ensure effective transitions.

Tim, a cloud security advocate, and Anton, a proponent of third-party solutions, engage in a compelling debate on cloud security tools. They explore the merits of relying on cloud providers versus independent vendors, discussing trust, flexibility, and essential security principles. The duo dives into strategies for navigating multi-cloud environments and emphasizes the importance of evaluating specific security needs. With lively exchanges, they encourage listeners to reflect on their own security practices while recommending intriguing readings to further delve into the topic.

Guest: David LaBianca, Senior Engineering Director, Google Topics: The universe of AI risks is broad and deep. We've made a lot of headway with our SAIF framework: can you give us a) a 90 second tour of SAIF and b) share how it's gotten so much traction and c) talk about where we go next with it? The Coalition for Secure AI (CoSAI) is a collaborative effort to address AI security challenges. What are Google's specific goals and expectations for CoSAI, and how will its success be measured in the long term? Something we love about CoSAI is that we involved some unexpected folks, notably Microsoft and OpenAI. How did that come about? How do we plan to work with existing organizations, such as Frontier Model Forum (FMF) and Open Source Security Foundation (OpenSSF)? Does this also complement emerging AI security standards? AI is moving quickly. How do we intend to keep up with the pace of change when it comes to emerging threat techniques and actors in the landscape? What do we expect to see out of CoSAI work and when? What should people be looking forward to and what are you most looking forward to releasing from the group? We have proposed projects for CoSAI, including developing a defender's framework and addressing software supply chain security for AI systems. How can others use them? In other words, if I am a mid-sized bank CISO, do I care? How do I benefit from it? An off-the-cuff question, how to do AI governance well? Resources: CoSAI site, CoSAI 3 projects SAIF main site Gen AI governance: 10 tips to level up your AI program "Securing AI: Similar or Different?" paper Our Security of AI Papers and Blogs Explained

Manan Doshi, a Senior Security Engineer at Etsy, shares insights on the challenges of migrating to a new SIEM platform. He discusses key hurdles organizations face and debunks myths surrounding flawed tools, emphasizing the importance of processes. Manan reveals the exciting prospect of completing a SIEM migration in just one week and explores the role of AI and 'Detection as Code' in enhancing detection logic. His focus on community insights and strategic planning highlights how a strong engineering culture can transform security operations.

Jaffa Edwards, a Senior Security Manager, and Lyka Segura, a Cloud Security Engineer at Google Cloud, dive into the challenges of cloud security transformation. They share their secrets for effectively tailoring security solutions to diverse customer needs. The duo discusses common pitfalls organizations face when transitioning from on-premises to cloud systems and the cultural shifts required for success. They offer invaluable advice for those starting their cloud security journeys, emphasizing proactive education and adapting security practices to modern environments.

Guest Adam Bateman, Co-founder of Push Security, discusses ITDR: its definition, benefits, and alternatives. Topics include workload vs human identity ITDR, common threats detected, and advice for implementation. The podcast explores the evolution of ITDR, its relationship with other security categories, advantages of browser telemetry, and specific threats addressed by ITDR tools.

Zack Allen, Senior Director at Datadog, discusses challenges in detection engineering and advice for aspiring engineers. Topics include the role of detection engineers, balancing vendor-made vs. custom detections, and tips for building effective detection rules. The podcast explores the importance of connecting detection efforts with business objectives and provides recommended reading materials to enhance detection engineering skills.