UberKnowledge

UberKnowledge

Download on the App Store

UberKnowledge episodes

  • Joe Slowik – Principal Adversary Hunter at Dragos

    Think like a practitioner when trying to execute as a vendor

    Joe recommends being strategic in your partnerships and being authentic in your message by selling a solution instead of a product.

    • 02:29 A unique vendor message is the way to connect with customers, not spam.
    • 03:23 The problem with anomaly detection as threat detection.
    • 05:12 The challenges of and differences in protecting the ICS environment.
    • 07:53 Gain trust by respecting the work that has already been done, even if it’s outside your realm.
    • 10:26 Think like a practitioner when you’re trying to execute as a vendor.
    • 11:02 Don’t sell a prod uct, sell your customer a solution to their problem.
    • 11:59 Truly get to know your customer by embedding for a day or two and know your market by attending industry-specific events.
    • 15:04 Sharing works well with complementary capabilities but less well with competing capabilities, so be strategic in your partnerships.
    • 16:44 Attackers are using your own code against you.
    • 18:05 The adversaries are becoming more automated.
    • 20:08 Security conferences are a great opportunity to get inspired, collaborate, and continue pushing the community forward.
    • Joe Slowik Interview Transcript

      21 min
    • #16 Joe Slowik – Principal Adversary Hunter at Dragos
      Think like a practitioner when trying to execute as a vendor
      Joe recommends being strategic in your partnerships and being authentic in your message by selling a solution instead of a product.
      02:29 A unique vendor message is the way to connect with customers, not spam.
      03:23 The problem with anomaly detection as threat detection.
      05:12 The challenges of and differences in protecting the ICS environment.
      07:53 Gain trust by respecting the work that has already been done, even if it’s outside your realm.
      10:26 Think like a practitioner when you’re trying to execute as a vendor.
      11:02 Don’t sell a prod uct, sell your customer a solution to their problem.
      11:59 Truly get to know your customer by embedding for a day or two and know your market by attending industry-specific events.
      15:04 Sharing works well with complementary capabilities but less well with competing capabilities, so be strategic in your partnerships.
      16:44 Attackers are using your own code against you.
      18:05 The adversaries are becoming more automated.
      20:08 Security conferences are a great opportunity to get inspired, collaborate, and continue pushing the community forward.
      Joe Slowik Interview Transcript
      21 min
    • Joe Slowik – Principal Adversary Hunter at Dragos

      Think like a practitioner when trying to execute as a vendor

      Joe recommends being strategic in your partnerships and being authentic in your message by selling a solution instead of a product.

      • 02:29   A unique vendor message is the way to connect with customers, not spam.
      • 03:23   The problem with anomaly detection as threat detection.
      • 05:12   The challenges of and differences in protecting the ICS environment.
      • 07:53   Gain trust by respecting the work that has already been done, even if it’s outside your realm.
      • 10:26   Think like a practitioner when you’re trying to execute as a vendor.
      • 11:02   Don’t sell a prod uct, sell your customer a solution to their problem.
      • 11:59   Truly get to know your customer by embedding for a day or two and know your market by attending industry-specific events.
      • 15:04   Sharing works well with complementary capabilities but less well with competing capabilities, so be strategic in your partnerships.
      • 16:44   Attackers are using your own code against you.
      • 18:05   The adversaries are becoming more automated.
      • 20:08   Security conferences are a great opportunity to get inspired, collaborate, and continue pushing the community forward.
      • Joe Slowik Interview Transcript

        21 min
      • Itay Kozuch – Director of Threat Research at IntSights Cyber Intelligence

        A CISO’s Gamble

        Itay explains why phishing is still the most common attack vector and worries that privacy laws are good for privacy but very bad for security.

        • 03:25 The number one buzz kill for CISOs.
        • 11:14 GDPR benefits the bad guys.
        • 12:09 Privacy laws are good for privacy but very bad for security.
        • 14:07 The most unpleasant conversation to have with the board.
        • 15:29 CISOs have to talk business and think marketing.
        • 16:21 Handling cyber threats and incident response must be organizational.
        • 19:41 What weekend?
        • 20:40 Hackers can outsource now.
        • 22:05 Phishing is still the most common attack vector because it’s easy to
        • deploy.
        • 23:07 Customers are the weakest link, awareness and education are key.
        • Itay Kozuch Interview Transcript

          28 min
        • #15 Itay Kozuch – Director of Threat Research at IntSights Cyber Intelligence
          A CISO’s Gamble
          Itay explains why phishing is still the most common attack vector and worries that privacy laws are good for privacy but very bad for security.
          03:25 The number one buzz kill for CISOs.
          11:14 GDPR benefits the bad guys.
          12:09 Privacy laws are good for privacy but very bad for security.
          14:07 The most unpleasant conversation to have with the board.
          15:29 CISOs have to talk business and think marketing.
          16:21 Handling cyber threats and incident response must be organizational.
          19:41 What weekend?
          20:40 Hackers can outsource now.
          22:05 Phishing is still the most common attack vector because it’s easy to
          deploy.
          23:07 Customers are the weakest link, awareness and education are key.
          Itay Kozuch Interview Transcript
          28 min
        • Itay Kozuch – Director of Threat Research at IntSights Cyber Intelligence

          A CISO’s Gamble

          Itay explains why phishing is still the most common attack vector and worries that privacy laws are good for privacy but very bad for security.

          • 03:25 The number one buzz kill for CISOs.
          • 11:14 GDPR benefits the bad guys.
          • 12:09 Privacy laws are good for privacy but very bad for security.
          • 14:07 The most unpleasant conversation to have with the board.
          • 15:29 CISOs have to talk business and think marketing.
          • 16:21 Handling cyber threats and incident response must be organizational.
          • 19:41 What weekend?
          • 20:40 Hackers can outsource now.
          • 22:05 Phishing is still the most common attack vector because it’s easy to
          • deploy.
          • 23:07 Customers are the weakest link, awareness and education are key.
          • Itay Kozuch Interview Transcript

            28 min
          • Kamakshi Narasimhan – Senior Director of Customer Success at Netskope

            Customer Success in the Cloud

            Kamakshi discusses how the customer success team’s unique perspective can drive product development and shares her advice for the next generation of female cybersecurity professionals.

            • 00:55 Customer success very different in a cloud world versus a traditional data center
            • 02:59 be an advocate for your customer inside their own organization
            • 07:35 Does the predictive model work in the cloud?
            • 10:37 Customer success as the advocate for the enterprise and influencing vendor product development
            • 12:05 Kamakshi’s advice for the next generation
            • 15:21 Observe everything, discern what is valuable and learn from it.
            • 16:57 The transition from technical marketing to customer success is made easier by having a customer mindset
            • 18:58 Every customer is an individual. One size does not fit all.
            • Kamakshi Marasimhan Interview Transcript

              23 min
            • Kamakshi Narasimhan – Senior Director of Customer Success at Netskope

              Customer Success in the Cloud

              Kamakshi discusses how the customer success team’s unique perspective can drive product development and shares her advice for the next generation of female cybersecurity professionals.

              • 00:55 Customer success very different in a cloud world versus a traditional data center
              • 02:59 be an advocate for your customer inside their own organization
              • 07:35 Does the predictive model work in the cloud?
              • 10:37 Customer success as the advocate for the enterprise and influencing vendor product development
              • 12:05 Kamakshi’s advice for the next generation
              • 15:21 Observe everything, discern what is valuable and learn from it.
              • 16:57 The transition from technical marketing to customer success is made easier by having a customer mindset
              • 18:58 Every customer is an individual. One size does not fit all.
              • Kamakshi Marasimhan Interview Transcript

                23 min
              • #14 Kamakshi Narasimhan – Senior Director of Customer Success at Netskope
                Customer Success in the Cloud
                Kamakshi discusses how the customer success team’s unique perspective can drive product development and shares her advice for the next generation of female cybersecurity professionals.
                00:55 Customer success very different in a cloud world versus a traditional data center
                02:59 be an advocate for your customer inside their own organization
                07:35 Does the predictive model work in the cloud?
                10:37 Customer success as the advocate for the enterprise and influencing vendor product development
                12:05 Kamakshi’s advice for the next generation
                15:21 Observe everything, discern what is valuable and learn from it.
                16:57 The transition from technical marketing to customer success is made easier by having a customer mindset
                18:58 Every customer is an individual. One size does not fit all.
                Kamakshi Marasimhan Interview Transcript
                23 min
              • Eve Maler – VP of Innovation & Emerging Technologies, ForgeRock

                Eve discusses the security implications of the social sign-in and considers if there is an opportunity for enterprises to provide IoT identity management.

                • 00:57 The outsized role of privacy and consent
                • 03:50 Does business’ love affair with the social sign-in ignore the security implications?
                • 08:45 Seamless sign-on or Social sign-in: it’s the underlying business model that determines the sensitivity and risk
                • 11:10 Identity must have a multicloud stance because enterprises are multicloud.
                • 13:56 The non-traditional data center mindset suggests we should give everyone a God Key
                • 17:51 The trend for applying identity to services as well as people, devices, sensors, etc.
                • 19:47 Is there an opportunity for enterprises to provide IoT identity management?
                • 23:33 A framework for understanding how to measure control elements of consent and privacy
                • 30:01 The complex interaction between market forces and regulatory forces.
                • Eve Maler Interview Transcript

                  33 min

                About UberKnowledge

                From the publisher's feed

                Hear from top security practitioners and leading vendors on the latest cybersecurity challenges, best practices and innovations.