Cloud Security Podcast by Google

EP220 Big Rewards for Cloud Security: Exploring the Google VRP


Listen Later

Guests:

  • Michael Cote, Cloud VRP Lead, Google Cloud
  • Aadarsh Karumathil, Security Engineer, Google Cloud

Topics:

  • Vulnerability response at cloud-scale sounds very hard! How do you triage vulnerability reports and make sure we’re addressing the right ones in the underlying cloud infrastructure?
  • How do you determine how much to pay for each vulnerability? What is the largest reward we paid? What was it for?
  • What products get the most submissions? Is this driven by the actual product security or by trends and fashions like AI?
  • What are the most likely rejection reasons? 
  • What makes for a very good - and exceptional? - vulnerability report? We hear we pay more for “exceptional” reports, what does it mean?
  • In college Tim had a roommate who would take us out drinking on his Google web app vulnerability rewards. Do we have something similar for people reporting vulnerabilities in our cloud infrastructure? Are people making real money off this? 
  • How do we actually uniquely identify vulnerabilities in the cloud? CVE does not work well, right?
  • What are the expected risk reduction benefits from Cloud VRP?

Resources:

  • Cloud VRP site
  • Cloud VPR launch blog
  • CVR: The Mines of Kakadûm
...more
View all episodesView all episodes
Download on the App Store

Cloud Security Podcast by GoogleBy Anton Chuvakin

  • 4.8
  • 4.8
  • 4.8
  • 4.8
  • 4.8

4.8

38 ratings


More shows like Cloud Security Podcast by Google

View all
Risky Business by Patrick Gray

Risky Business

363 Listeners

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

632 Listeners

The Cloudcast by Massive Studios

The Cloudcast

154 Listeners

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec by Jerry Bell and Andrew Kalat

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

370 Listeners

CyberWire Daily by N2K Networks

CyberWire Daily

1,010 Listeners

AWS Podcast by Amazon Web Services

AWS Podcast

200 Listeners

Smashing Security by Graham Cluley & Carole Theriault

Smashing Security

313 Listeners

Click Here by Recorded Future News

Click Here

387 Listeners

Cybersecurity Today by Jim Love

Cybersecurity Today

142 Listeners

Kubernetes Podcast from Google by Abdel Sghiouar, Kaslin Fields

Kubernetes Podcast from Google

182 Listeners

CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

CISO Series Podcast

182 Listeners

Hacking Humans by N2K Networks

Hacking Humans

309 Listeners

Defense in Depth by David Spark, Steve Zalewski, Geoff Belknap

Defense in Depth

72 Listeners

Cyber Security Headlines by CISO Series

Cyber Security Headlines

120 Listeners

Risky Bulletin by risky.biz

Risky Bulletin

33 Listeners