The Cloudcast

Ariel Assaraf (@ArielAssaraf, CEO at @Coralogix) talks about the evolution of SIEM technologies, today's common use-cases, how SaaS migrations impact SIEM, and how AI/ML is improving functionality. SHOW: 468SHOW SPONSOR LINKS:Datadog Security Monitoring Homepage - Modern Monitoring and AnalyticsTry Datadog yourself by starting a free, 14-day trial today. Listeners of this podcast will also receive a free Datadog T-shirt.CloudAcademy -Build hands-on technical skills. Get measurable results. Get 50% of the monthly price of CloudAcademy by using code CLOUDCASTDivvyCloud - Achieve continuous security & compliance. Request a free trial today!DivvyCloud - The best mistakes are the ones that don’t happen. Learn how IaC offers preventive cloud security.CLOUD NEWS OF THE WEEK - http://bit.ly/cloudcast-cnotwPodCTL Podcast is Back (Enterprise Kubernetes) - http://podctl.comSHOW NOTES:Coralogix websiteWhat is SIEMTopic 1 - Ariel, welcome to the show, tell us a little bit about yourself and how you got involved in the SIEM space?Topic 2 - Let's start with some basics. SIEM (pronounced SIM with a silent E) or Security Information and Event Management isn’t new but it is the combination of a few different security trends. Explain to everyone your thoughts on the evolution of this industry and how we got here.Topic 3 - How does it work and why is it important and what benefits? What are the primary use cases you see at Coralogix today?Topic 4 - I have to ask the flip side, where are the rough edges and limitations typically?Topic 5 - How does the trend towards migration of “as a service” offerings affect SIEM? What’s left to monitor?Topic 6 - This sounds like an area where AI/ML could play a role as well, what advancements and trends do you see here?Topic 7 - For listeners new to the topic, how can they get started and learn more?FEEDBACK?Email: show at thecloudcast dot netTwitter: @thecloudcastnet

Brian Johnson (SVP Cloud Security Practice @rapid7) talks about the evolution of the Managed Security Provider market, manage security without borders, and the complexities of multiple identity and trust models. SHOW: 467SHOW SPONSOR LINKS:CloudAcademy -Build hands-on technical skills. Get measurable results. Get 50% of the monthly price of CloudAcademy by using code CLOUDCASTDivvyCloud - Achieve continuous security & compliance. Request a free trial today!DivvyCloud - The best mistakes are the ones that don’t happen. Learn how IaC offers preventive cloud security.Datadog Security Monitoring Homepage - Modern Monitoring and AnalyticsTry Datadog yourself by starting a free, 14-day trial today. Listeners of this podcast will also receive a free Datadog T-shirt.CLOUD NEWS OF THE WEEK - http://bit.ly/cloudcast-cnotwPodCTL Podcast is Back (Enterprise Kubernetes) - http://podctl.comSHOW NOTES:DivvyCloud HomepageRapid7 HomepageTopic 1 - Welcome to the show. You were the CEO/co-founder of DivvyCloud, which was recently purchased by Rapid7. Give us an overview of the Managed Security Provider market and some of the ways it’s evolved since the pandemic started.Topic 2 - In today’s world, there no longer is a security perimeter for companies in the way they’ve known for years. What is replacing how companies define perimeters - is identity the new perimeter? Topic 3 - Can you talk about what kind of Identity management companies need today, and maybe talk through some of the nuances across the disciplines like Identity and Access Management (IAM),  Privileged Access Management (PAM), and Identity Governance and Administration (IGA). Topic 4 - Where does MFA (multi-factor authentication) sit within a strong IAM strategy? For example enforcing policies across cloud user accounts?Topic 5 - We’ve  seen some data suggesting over 80%+ of organizations are using a multi-cloud strategy, can you talk about some of the challenges around trying to manage IAM acros clouds? For example (Different policies, tools and terminologies across clouds) Topic 6 - The security world is beginning to talk about “unified zero trust security models”. Can you talk about what that means and maybe give us a background about DIvvycloud/Rapid7 and how they are working to solve a lot of these topics around IAM.  FEEDBACK?Email: show at thecloudcast dot netTwitter: @thecloudcastnet

Andres Rodriguez (Sr. Principal Engineer @Intel) talks about how Tensorflow v2 has evolved, use-cases and applications, frequent usage patterns, and the best ways to begin using Tensorflow.  SHOW: 466SHOW SPONSOR LINKS:Datadog Security Monitoring Homepage - Modern Monitoring and AnalyticsTry Datadog yourself by starting a free, 14-day trial today. Listeners of this podcast will also receive a free Datadog T-shirt.DivvyCloud - Achieve continuous security & compliance. Request a free trial today!DivvyCloud - The best mistakes are the ones that don’t happen. Learn how IaC offers preventive cloud security.CLOUD NEWS OF THE WEEK - http://bit.ly/cloudcast-cnotwPodCTL Podcast is Back (Enterprise Kubernetes) - http://podctl.comSHOW NOTES:Tensorflow HomepageImproving TensorFlow Inference Performance on Intel® Xeon® Processors NASA Frontier Development Lab Case Study Tensorboard: Tensorflow visualizationGoogle Cloud TPUsMost Popular GitHub Projects (2019)Topic 1 - Welcome to the show. You’ve had a really interesting mix of industry, government and academic work around Deep Learning. Tell us a little bit about the areas you focus on. Topic 2 - Tensorflow is one of the most popular OSS projects on Github. Help us understand the types of data problems where Tensorflow is the best tool/framework (e.g. neural networks). What are some of the most popular capabilities? Topic 3 - Tensorflow is focused on looking at how data flows through graphs. Are there common types of ML problems that are more appropriate for using Tensorflow than other ML models? Topic 4 - Tensorflow is able to run on a broad set of hardware, but obviously there is a point where specialized hardware is needed for certain performance or scaling. What are some of the things that Intel is doing to help improve the experience with Tensorflow? Topic 5 - Tensorflow works primarily with the Python programming language. Beyond having some background with Python, what are some of the skills that are needed to get started and be successful with Tensorflow? Topic 6 - Having worked with Tensorflow for a while now, what are some of the learning paths that you’ve found successful (problems areas, communities of interest, tools, new skills, etc.)? FEEDBACK?Email: show at thecloudcast dot netTwitter: @thecloudcastnet

Jeremy Winter (Partner Director of Azure Management at Microsoft) talks about what trends are driving migrations, how companies plan for success, useful tools & frameworks, and leading successful transitions. SHOW: 465SHOW SPONSOR LINKS:DivvyCloud - Achieve continuous security & compliance. Request a free trial today!DivvyCloud - The best mistakes are the ones that don’t happen. Learn how IaC offers preventive cloud security.Datadog Security Monitoring Homepage - Modern Monitoring and AnalyticsTry Datadog yourself by starting a free, 14-day trial today. Listeners of this podcast will also receive a free Datadog T-shirt.CLOUD NEWS OF THE WEEK - http://bit.ly/cloudcast-cnotwPodCTL Podcast is Back (Enterprise Kubernetes) - http://podctl.comSHOW NOTES:Azure Migration CenterCloud Migration Framework and AssessmentTopic 1 - Welcome to the show. You’ve had the opportunity to work on a number of things at Microsoft. Tell us about your current role, as well as how it’s been to see the transition at Microsoft from software company to cloud company?Topic 2 - Lets start with the concept of migration. Is there a framework that companies use to think about what to migrate to the public cloud?Topic 3 - Transitions and Testing feel like they are critical for any migration to be successful. How do companies manage to get through an application being in one location vs. being in the cloud? Topic 4 - As companies think about the economics &/or ROI of migration, how do they think about all the elements involved (e.g. cost to change an application, cost savings of not owning a data center, cost to re-skill existing staff or hire new, etc..)? Topic 5 - COVID-19 has changed everything these past 6 months. Have you seen the profile of a migration change significantly since the pandemic started, or have well-known migration profiles already in place? (e.g. different applications to migration, different pace of migration, etc.)Topic 6 - Do you find that migrations are being driven top-down at companies, or are they decentralized by groups? How are they being organized these days? FEEDBACK?Email: show at thecloudcast dot netTwitter: @thecloudcastnet

Todd Christ (Sr. Solutions Architect @Intel) talks about Google Anthos, core elements, design considerations, mulitcloud, application modernization, and the latest services available.SHOW: 464SHOW SPONSOR LINKS:Datadog Security Monitoring Homepage - Modern Monitoring and AnalyticsTry Datadog yourself by starting a free, 14-day trial today. Listeners of this podcast will also receive a free Datadog T-shirt.DivvyCloud - Achieve continuous security & compliance. Request a free trial today!DivvyCloud - The best mistakes are the ones that don’t happen. Learn how IaC offers preventive cloud security.CLOUD NEWS OF THE WEEK - http://bit.ly/cloudcast-cnotwPodCTL Podcast is Back (Enterprise Kubernetes) - http://podctl.comSHOW NOTES:Google Cloud Anthos - Application Modernization PlatformIntel Selection Solutions for Google Cloud AnthosTopic 1 - Welcome to the show. You’ve had a broad set of experiences in your career, how did you come into being focused on Cloud and Multi Cloud technologies and solutions? Topic 2 - Today we’re talking about the Anthos offering from Google Cloud. A few years ago, the cloud providers were all-in on just public cloud. What have you seen shift in the market that has now created their hybrid or multi-cloud offerings that have broader reach? Topic 3 - Lets talk about Google Anthos. What are the core elements, what types of services does it deliver, and what is the overall customer experience? Topic 4 - What are some of the newer Anthos capabilities that have been announced and how do they help with hybrid or multi-cloud? (Anthos Migrate, Anthos on AWS/Azure, is there an Anthos “appliance” available for on-premises)?Topic 5 - Running applications in cloud vs. on-premises is always going to be somewhat different. What are some of the things that Intel does with Google to help improve the overall experience? Topic 6 - What are some of the use-cases that you’ve found are early successes for Anthos, or some of the early lessons that companies are finding when using Anthos? FEEDBACK?Email: show at thecloudcast dot netTwitter: @thecloudcastnet

Mike Kalinowski (@mxkalinowski, Senior Manager of Product at @Infor) talks about the basics of RPA, the challenges of automating diverse heritage systems, the emerging role of AI/ML in RPA, and the evolution of business analysts.SHOW: 463SHOW SPONSOR LINKS:DivvyCloud - Achieve continuous security & compliance. Request a free trial today!DivvyCloud - The best mistakes are the ones that don’t happen. Learn how IaC offers preventive cloud security.Datadog Security Monitoring Homepage - Modern Monitoring and AnalyticsTry Datadog yourself by starting a free, 14-day trial today. Listeners of this podcast will also receive a free Datadog T-shirtCLOUD NEWS OF THE WEEK - http://bit.ly/cloudcast-cnotwPodCTL Podcast is Back (Enterprise Kubernetes) - http://podctl.comSHOW NOTES:Infor HomepageInfor OSintelligent process automation approachs vs. traditional robotic process automationTopic 1 - Welcome to the show. Tell us a little bit about your background and what attracted you to the interaction of business processes and technology automation.Topic 2 - For anyone that isn’t familiar with the concept of RPA (Robotic Process Automation), can you give us a brief overview of the business problem it attempts to solve and the basic technology behind it? Topic 3 - We often hear about systems with APIs and how they can be automated and interacted with. But many back-end systems could be older, so how does RPA interact with these types of systems?  Topic 4 - Oftentimes these automated workflows can involve inputs and outputs from various systems (applications). Who tends to be the owner of an RPA system, or does it blur the lines between groups? Topic 5 - As I look at what Infor OS provides around Intelligent Process Automation, very graphical, it seems like it overlaps with this “Low Code / No Code” trend/buzzword. Is there any reality to that, or are they very different things?  Topic 6 - When I look at case-studies for RPA, the ROIs are usually incredible. How do companies often get started, and are there any gotchas you’d suggest people avoid?  FEEDBACK?Email: show at thecloudcast dot netTwitter: @thecloudcastnet

Tanmai Gopal (@tanmaigo, CEO Hasura) and Rajoshi Ghosh (@rajoshighosh, COO Hasura) talk about the evolution of GraphQL as an efficient way to engage with APIs and data models, and how Hasura Cloud helps simplify GraphQL for developers.SHOW: 462SHOW SPONSOR LINKS:Datadog Security Monitoring Homepage - Modern Monitoring and AnalyticsTry Datadog yourself by starting a free, 14-day trial today. Listeners of this podcast will also receive a free Datadog T-shirtDivvyCloud - Achieve continuous security & compliance. Request a free trial today!DivvyCloud - The best mistakes are the ones that don’t happen. Learn how IaC offers preventive cloud security.CLOUD NEWS OF THE WEEK - http://bit.ly/cloudcast-cnotwPodCTL Podcast is Back (Enterprise Kubernetes) - http://podctl.comSHOW NOTES:Hasura HomepageHasura GraphQL Tutorials GraphQL HomepageGraphQL vs. Rest - What you need to knowTopic 1 - Welcome to the show. You both have an entrepreneurial background. Tell us a little bit about yourself and then what drove you to start Hasura? Topic 2 - GraphQL is a technology that’s been around for a little while, but it might be new to our audience. Can you give us the basics of what it does, and what sort of problems it solves for application teams?Topic 3 - Many people are familiar with REST or RESTful APIs. Can you help us understand some of the reasons why we’re seeing a shift towards GraphQL for API interaction, or away from REST APIs?Topic 4 - What are some of the business trends that are driving the need for more data-modeled API queries? Topic 5 - Hasura Cloud is focused on helping companies query data across any cloud or any source. What are some of the unique things that Hasura does to help customers manage these hybrid/multi-cloud environments?Topic 6 - What are some of the easiest ways for companies to get started with GraphQL and positively impact their applications?  FEEDBACK?Email: show at thecloudcast dot netTwitter: @thecloudcastnet

Christos Matskas (@ChristosMatskas, PPM Identity & Security) and John Patrick Dandison (@AzureAndChill, Principal PM Identity) at Microsoft talk about Identity in today's cloud, managing borderless environments, and how to best enforce identity. SHOW: 461SHOW SPONSOR LINKS:DivvyCloud - Achieve continuous security & compliance. Request a free trial today!DivvyCloud - The best mistakes are the ones that don’t happen. Learn how IaC offers preventive cloud security.Datadog Security Monitoring Homepage - Modern Monitoring and AnalyticsTry Datadog yourself by starting a free, 14-day trial today. Listeners of this podcast will also receive a free Datadog T-shirtCLOUD NEWS OF THE WEEK - http://bit.ly/cloudcast-cnotwPodCTL Podcast is Back (Enterprise Kubernetes) - http://podctl.comSHOW NOTES:Microsoft Azure HomepageGetting Started with Microsoft Identity (Microsoft Learn)Manage Identity and access in Azure AD (Microsoft Learn)MS Identity on Twitch (every Tuesday and Thursday)Topic 1 - Welcome to the show. You’ve both been at Microsoft for a little while, but give us a little bit of your background and the things you focus on today. Topic 2 - Let’s start with some basics - in the world of Cloud, what is Identity?Topic 3 - Things get more complicated as we incorporate more things associated with people or accounts (e.g. multiple devices, VPNs) or distributed applications or 3rd-parties (e.g. contractors, etc..) How does that shift the Identity conversation? Topic 4 - How does a business attempt to not only keep track of all of this, but enforce it in various ways? (connected, disconnected, people leave, applications change, etc.)Topic 5 - What are some of the ways that Microsoft addresses all these complex Identity challenges? Topic 6 - Looking forward, what are some areas that are going to be the new frontier for Identity challenges, or some technologies that will make things easier? FEEDBACK?Email: show at thecloudcast dot netTwitter: @thecloudcastnet

Dan “Pop” Papandrea (@danpopnyc, Field CTO @Sysdig Host @PopcastPop) talks about securing DevOps, how to secure containers and runtimes, and the cultural challenges of security in an agile world. SHOW: 460SHOW SPONSOR LINKS:Datadog Security Monitoring Homepage - Modern Monitoring and AnalyticsTry Datadog yourself by starting a free, 14-day trial today. Listeners of this podcast will also receive a free Datadog T-shirtstrongDM HomepageStart your free 14 day trial today at: strongdm.com/cloudcastCLOUD NEWS OF THE WEEK - http://bit.ly/cloudcast-cnotwPodCTL Podcast is Back (Enterprise Kubernetes) - http://podctl.comSHOW NOTES:Sysdig HomepageThePOPcast with Dan POP HomepageEscape 2019 talk Webinar on the top 5 Pipeline considerations we did with Booz Allen Topic 1 - Welcome to the show. I first got to know you through your podcast The POPcast, but you’re been around this evolution of the cloud for quite a while. Tell us a bit about your background. Topic 2 - There’s a concept that’s now been around a couple years called “DevSecOps”. Originally it was “Sec” being jammed in there because it had been excluded from the early days of DevOps (at least in practice). Where are we with DevSecOps today? Topic 3 - Let’s talk about DevSecOps in the context of containers. We now have things like Container Scanning, Container Signing, and Immutable Infrastructure and yet security still concerns people. Isn’t the “software supply chain” supposed to weed out the vulnerabilities before they get into the production systems?Topic 4 - One of the challenges that companies have in adopting containers is that they were used to having root access to hosts, and containers live in the user space. How can security tools fit into a container world? Topic 5 - As you talk to lots of companies, how are they dealing with the cultural challenges that go along with implementing DevSecOps? Topic 6 - Any tips or suggestions you can share to help people avoid common DevSecOps mistakes, or accelerate best practices and wider adoption?FEEDBACK?Email: show at thecloudcast dot netTwitter: @thecloudcastnet

Zhamak Dehghani (@zhamakd, Portfolio Tech Director @ThoughtWorks) talks about the concepts behind Data Mesh, the challenges and problems of Data Lakes / Data Warehouses, and how Cloud-native principles can be applied to Data. SHOW: 459SHOW SPONSOR LINKS:strongDM HomepageStart your free 14 day trial today at: strongdm.com/cloudcastDatadog Security Monitoring Homepage - Modern Monitoring and AnalyticsTry Datadog yourself by starting a free, 14-day trial today. Listeners of this podcast will also receive a free Datadog T-shirtCLOUD NEWS OF THE WEEK - http://bit.ly/cloudcast-cnotwPodCTL Podcast is Back (Enterprise Kubernetes) - http://podctl.comSHOW NOTES:ThoughtWorks Technology RadarData Mesh (from Technology Radar)How to Move Beyond a Monolithic Data Lake to a Distributed Data MeshTopic 1 - Welcome to the show. We were introduced to you through the O’Reilly events, but you’ve been involved in software development and architecture for quite a while. Tell us a little bit about your background and your focus areas at ThoughtWorks.Topic 2 - About a year ago, you introduced this new concept called “Data Mesh”. Before we get into that, give us a little bit of background on the problems that previous generations of Data Warehouses or Data Lakes created. Topic 3 - Lets begin to walk through how Data Mesh is different from Data Lake. We’re not talking about just dumping all the various data sources into one “pool”, there’s a concept of “domains” within this big pool of data. What are the new concepts of source and consumption?Topic 4 - Explain the concept of how pipelines are tied into Data Mesh and how this allows the creation of new products/features from the Data Mesh.Topic 5 - You talk about the data being truthful, and then you bring an SRE concept of SLO into the truthfulness of the data. Explain how that might work? Topic 6 - Once a Data Mesh is in place, what are the “roles” (or teams) that have specific tasks, and who are the typical consumers of the Data Mesh platform?FEEDBACK?Email: show at thecloudcast dot netTwitter: @thecloudcastnet