Attendees

Guest: Nir Valtman

Guest title:  Product security lead

Company:  Finastra

Abstract

Fintech companies drive cloud security forward by setting the highest bar of requirements on cloud providers. In this episode we talk with Nir Valtman, Product security leader at Finastra about the challenges of Fintech companies and dive into API Authentication and Authorization best practices and building eco-system that can support trust between banks and young fintech companies.

Timing

0:00

Intro and introducing our guest

2:40

Introducing Finastra and the challenges of traditional banks with modern fintech. 

4.50 

Building API platforms for banks. Challenges, security considerations and solutions. 

8:45  

Creating trust between banks and fintech companies - validating applications end to end security from the fintech to the banks.

12.30

Authenticating & Authorizing API requests on banking platforms. Methods, challenges and common use cases

19:30

Detecting anomalies detection and analyzing API’s on top of cloud platforms

25:35

The challenges of application secret management with partners

28.25

Tips for fintech companies

Attendees

Guest: Shira Shamban

Guest title:  Cloud Security

Company:  Check Point (Dome9)

Cloud providers has invested heavily in adding visibility, monitoring and logging capabilities of networking and administrative activities. In this session with talk with Shira Shamban, a cloud security expert from Check Point about the challenges of collecting the different logs exist in cloud platforms and the challenges of gaining insights from them.

Abstract

Cloud providers has invested heavily in adding visibility, monitoring and logging capabilities of networking  and administrative activities. In this session with talk with Shira Shamban, a cloud security expert from Check Point about the challenges of collecting the different logs exist in cloud platforms  and the challenges of gaining insights from them.

 0:00

Introducing Shira and her activities in CheckPoint and community activities (Security-Diva, CSA Top Threat working group, OWASP-IL) 

11:55

Introducing the challenges of cloud log management: enabling correctly,  long term storage, analysis challenges, lack of info 

19.45 

The challenges of monitoring cloud assets using IP addresses 

21:25  

How to properly do cloud based log collection: Enrichment, external threat service

24.20

Values of log visualization 

28.05

Log storage management

31:21

Summary and last words