Cloud Security Podcast by Google

EP200 Zero Touch Prod, Security Rings, and Foundational Services: How Google Does Workload Security


Listen Later

Guest:

  • Michael Czapinski, Security & Reliability Enthusiast, Google

Topics:

  • "How Google protects its production services" paper covers how Google's infrastructure balances several crucial aspects, including security, reliability, development speed, and maintainability. How do you prioritize these competing demands in a real-world setting?
  • What attack vectors do you consider most critical in the production environment, and how has Google's defenses against these vectors improved over time?
  • Can you elaborate on the concept of Foundational services and their significance in Google's security posture?
  • How does your security approach adapt to this vast spectrum of sensitivity and purpose of our servers and services, actually?
  • How do you implement this principle of zero touch prod for both human and service accounts within our complex infrastructure?
  • Can you talk us through the broader approach you take through Workload Security Rings and how this helps?

Resources:

  • "How Google protects its production services" paper (deep!)
  • SLSA framework
  • EP189 How Google Does Security Programs at Scale: CISO Insights
  • EP109 How Google Does Vulnerability Management: The Not So Secret Secrets!
  • EP176 Google on Google Cloud: How Google Secures Its Own Cloud Use
  • EP75 How We Scale Detection and Response at Google: Automation, Metrics, Toil
  • SREcon presentation on zero touch prod.
  • The SRS book (free access)

...more
View all episodesView all episodes
Download on the App Store

Cloud Security Podcast by GoogleBy Anton Chuvakin

  • 4.8
  • 4.8
  • 4.8
  • 4.8
  • 4.8

4.8

39 ratings


More shows like Cloud Security Podcast by Google

View all
Security Now (Audio) by TWiT

Security Now (Audio)

2,004 Listeners

Risky Business by Patrick Gray

Risky Business

371 Listeners

CyberWire Daily by N2K Networks

CyberWire Daily

1,029 Listeners

NVIDIA AI Podcast by NVIDIA

NVIDIA AI Podcast

344 Listeners

Darknet Diaries by Jack Rhysider

Darknet Diaries

8,086 Listeners

Tech Brew Ride Home by Morning Brew

Tech Brew Ride Home

968 Listeners

Cybersecurity Today by Jim Love

Cybersecurity Today

178 Listeners

The Intelligence from The Economist by The Economist

The Intelligence from The Economist

2,563 Listeners

Cloud Security Podcast by TechRiot.io

Cloud Security Podcast

58 Listeners

Big Technology Podcast by Alex Kantrowitz

Big Technology Podcast

505 Listeners

Cybersecurity Headlines by CISO Series

Cybersecurity Headlines

139 Listeners

Hard Fork by The New York Times

Hard Fork

5,535 Listeners

The AI Daily Brief: Artificial Intelligence News and Analysis by Nathaniel Whittemore

The AI Daily Brief: Artificial Intelligence News and Analysis

638 Listeners

HBR On Leadership by Harvard Business Review

HBR On Leadership

166 Listeners

The Pragmatic Engineer by Gergely Orosz

The Pragmatic Engineer

70 Listeners