Sign up to save your podcasts
Or
Share SilverLining IL
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
SilverLining IL
SilverLining IL episodes
- 003 Cloud Configuration PitfallsOver 90% of IaaS/PaaS security incidents happen on consumer fault. Cloud platforms are complicated, with a steep learning curve and it is easy to make mistakes.52 min
- Episode 3: Cloud Configuration Pitfalls
Attendees
Guest: Evgeny Zislis
Guest title: CTO
Company: ProdOPS
AbstractOver 90% of IaaS/PaaS security incidents happens on consumer fault. Cloud platforms are complicated, with steep learning curve and it is easy to make mistakes. In this podcast, we talk with Evgeny Zislis, CTO for ProdOPS about the common IaaS/PaaS security mistakes and misconfigurations, categorize them and talk about measures to reduce those mistakes and identify them on time.
Timing:
0:00 – 2:10 - intro and introducing our guest
2:10 - 31:05 - What are the common cloud misconfiguration and mistakes
- Improper security group configuration
- Object storage negligence - open buckets on s3
- Insecure storing of API/Access Keys - config file in open Github repo is not the best place to store access keys
- Vulnerable servers exposed (exposing your 5 years old, not updated linux server is not recommended)
- Fail to segregate different services into different accounts / vpc / subnets
- Everyday use of root account and relying on one account only
31:05 - 34:20 Avoiding cloud misconfigurations: the process angle
34:20 - 38:33 Avoiding cloud misconfigurations: the people angle
38:33 - 49:00 Avoiding cloud misconfigurations: the technology angle
49.00 – 52:00 Summary and conclusions
52 min - 31 min
- Security challenges of moving from monolith to Micro-servicesSecurity challenges of moving from monolith to Micro-services34 min
- 002 Security challenges of moving from monolith to Micro-servicesMicro-services can bring enormous benefits into the organizations – giving flexibility and driving innovation. But Micro-services are also challenging from a security point of view. In this podcast, Yuval Reut, CIO & CISO for Riskified...34 min
- Episode 2: Security Challenges Of Moving From Monolith To Micro-Services
Attendees
Guest: Yuval Reut,
Guest title: CIO & CISO
Company: Riskified
Micro-services can bring enormous benefits into the organizations – giving flexibility and driving innovation. But Micro-services are also challenging from a security point of view. In this podcast, Yuval Reut, CIO & CISO for Riskified, will share his experience of moving an entire monolith application to a group of integrated micro services.
Timing:
0:00 – 3:39 - intro and learning about Riskified
3:39 - 9:55 - CISO & CIO positions at SaaS startups
9:55 - 12:20 - moving from Monolith to Microservices – reasons for the move.
12:20 - 19:30 - technology challenges when moving to Micro services
19:30 - 25:00 - People challenges when moving to Micro services
25:00 – 29:35 - Process challenges when moving to Micro services
29.40 – 33:00 - Summary and conclusions
34 min - 38 min
- 001 Security challenges with the growing world of Serverless functionsServerless functions are one the most interesting things that is happening in architecture of application development. With Serverless, application developers can stop worry about the underlying infrastructure and scalability of the application, but they must address other risks at application level. In this podcast we are interviewing Puresec CTO, Ory Segal , co-author of the top 12 risks to serverless applications38 min
- Episode 1: Security Challenges With The Growing World Of Serverless Functions
Attendees
Guest: Ory Segal, Puresec
Guest title: CTO & Co-Founder at PureSec
Company: Puresec is the global leader in serverless architectures security.
Serverless functions are one the most interesting things that is happening in architecture of application development. With Serverless, application developers can stop worry about the underlying infrastructure and scalability of the application, but they must address other risks at application level. In this podcast we are interviewing Puresec CTO, Ory Segal , co-author of the top 12 risks to serverless applications
Timing
0:00 – 2:35 – intro
2:35 – 8:05 - what are Serverless functions
8:05- 12:20 - how Serverless is different (security wise)
12:20 - 19:40 - Serverless risks & threats
19:40 - 24:00 - common mistakes and misconfiguration with Serverless
24:00 – 29:30 - Serverless effect on people, process and technology
29:30 – 37:00 – Summary and conclusions
38 min
About SilverLining IL
From the publisher's feed
The podcast for Security Architecture
Hosted by Moshe Ferber and Ariel Munafo.
The world of software development has changed rapidly in the last years due to various factors – Cloud Computing, Digital Transformation, CI/CD & DevOps – they all changed the way we build new applications. Young startups today got access to enterprise-grade infrastructure enabling them to produce scalable, robust applications faster and cheaper. But as companies innovate faster, security challenges arise. The security community has not mastered yet the full art of developing software fast, at scale, and secure and variety of companies still struggle to found the right foundation for their security posture.
SilverLining podcast was created to help you do just that – find the right combination of people, processes, and technologies to build more secure and reliable services. We will focus on the latest development in infrastructure and software development and talk with people who mastered how to secure those. In each episode, we will host an expert for discussion on the security aspects of new technologies and provide insights, best practices, and knowledge in creating more secure software architecture.