UberKnowledge

UberKnowledge

By UberKnowledgeTechnologyEducationTech News
Download on the App Store

UberKnowledge episodes

  • #13 Eve Maler – VP of Innovation & Emerging Technologies, ForgeRock
    Eve discusses the security implications of the social sign-in and considers if there is an opportunity for enterprises to provide IoT identity management.
    00:57 The outsized role of privacy and consent
    03:50 Does business’ love affair with the social sign-in ignore the security implications?
    08:45 Seamless sign-on or Social sign-in: it’s the underlying business model that determines the sensitivity and risk
    11:10 Identity must have a multicloud stance because enterprises are multicloud.
    13:56 The non-traditional data center mindset suggests we should give everyone a God Key
    17:51 The trend for applying identity to services as well as people, devices, sensors, etc.
    19:47 Is there an opportunity for enterprises to provide IoT identity management?
    23:33 A framework for understanding how to measure control elements of consent and privacy
    30:01 The complex interaction between market forces and regulatory forces.
    Eve Maler Interview Transcript
    33 min
  • Krishna Narayanaswamy – Chief Scientist and Co-Founder of Netskope

    Security in the Cloud Is a Shared Responsibility

    Krishna discusses the need for swim lanes in the cloud, asks who actually has control of access to services in the cloud and argues for a layered approach to security.

    • 02:58 Security in the cloud is a shared responsibility
    • 03:46 Where does the dividing line on responsibility fall between user and cloud host?
    • 04:37 The security implications of collaboration within the cloud
    • 06:12 From on-prem to in the cloud represents a significant shift in control
    • 08:25 How do you manage versioning within a hybrid on-prem/cloud system?
    • 11:05 Could you accurately estimate your company’s cloud footprint?
    • 12:45 Is security now a shared responsibility across the entire ecosystem of an enterprise?
    • 13:44 Swim lanes in the cloud
    • 17:09 Encryption is a sledgehammer
    • 19:30 The blurred lines between personal and business accounts in the cloud. How can they be monitored?

      • Krishna Narayanaswamy Interview Transcript

      23 min
    • #12 Krishna Narayanaswamy – Chief Scientist and Co-Founder of Netskope
      Security in the Cloud Is a Shared Responsibility
      Krishna discusses the need for swim lanes in the cloud, asks who actually has control of access to services in the cloud and argues for a layered approach to security.
      02:58 Security in the cloud is a shared responsibility
      03:46 Where does the dividing line on responsibility fall between user and cloud host?
      04:37 The security implications of collaboration within the cloud
      06:12 From on-prem to in the cloud represents a significant shift in control
      08:25 How do you manage versioning within a hybrid on-prem/cloud system?
      11:05 Could you accurately estimate your company’s cloud footprint?
      12:45 Is security now a shared responsibility across the entire ecosystem of an enterprise?
      13:44 Swim lanes in the cloud
      17:09 Encryption is a sledgehammer
      19:30 The blurred lines between personal and business accounts in the cloud. How can they be monitored?
      Krishna Narayanaswamy Interview Transcript
      23 min
    • Jim Reavis – CEO and Co-Founder of Cloud Security Alliance

      Jim advocates for greater transparency within the security community, points out that GDPR means privacy must be the differentiator, and addresses the challenges of security in IoT.

      • 03:17 Vendors need to information share.
      • 07:36 You don’t need to give away your secret sauce to be part of the community
      • 12:47 The trend for communities within communities
      • 13:38 Trust and transparency still requires face-to-face contact
      • 15:42 GDPR actually creates opportunity
      • 19:28 The challenge of security in IoT

        • Jim Reavis Interview Transcript

        24 min
      • #11 Jim Reavis – CEO and Co-Founder of Cloud Security Alliance
        Jim advocates for greater transparency within the security community, points out that GDPR means privacy must be the differentiator, and addresses the challenges of security in IoT.
        03:17 Vendors need to information share.
        07:36 You don’t need to give away your secret sauce to be part of the community
        12:47 The trend for communities within communities
        13:38 Trust and transparency still requires face-to-face contact
        15:42 GDPR actually creates opportunity
        19:28 The challenge of security in IoT
        Jim Reavis Interview Transcript
        24 min
      • Giovanni Vigna – Co-founder and CTO of Lastline

        Giovanni ponders whether we are outsourcing moral responsibility and describes the adversarial machine-learning setting.

        • 1:22 Security and the adversarial machine-learning setting
        • 4:25 Anomaly detection is not machine learning
        • 7:09 Use anomaly detection as information, not detection
        • 11:50 The ability to triage an incident is fundamental to save time.
        • 13:07 The commoditization of the Cybercrime community
        • 16:42 Are we outsourcing moral responsibility?
        • 19:48 CISOs are goalkeepers

          • Giovanni Vigna Interview Transcript

          23 min
        • #10 Giovanni Vigna – Co-founder and CTO of Lastline
          Giovanni ponders whether we are outsourcing moral responsibility and describes the adversarial machine-learning setting.
          1:22 Security and the adversarial machine-learning setting
          4:25 Anomaly detection is not machine learning
          7:09 Use anomaly detection as information, not detection
          11:50 The ability to triage an incident is fundamental to save time.
          13:07 The commoditization of the Cybercrime community
          16:42 Are we outsourcing moral responsibility?
          19:48 CISOs are goalkeepers
          Giovanni Vigna Interview Transcript
          23 min
        • Magda Chelly – CISO on demand and CyberFeminist

          Magda talks about the rise of the CyberFeminist and discusses the evolving definition of identity.

          • 02:12 The rise of the CyberFeminist
          • 04:24 A day in the life — how CISOs can learn to speak business
          • 11:45 How can CISOs keep up with security in the cloud
          • 14:32 Technami!
          • 18:00 Address security at the beginning of cloud migration
          • 20:13 The evolving definition of identity

            • Magda Chelly Interview Transcript

            26 min
          • #9 Magda Chelly – CISO on demand and CyberFeminist
            Magda talks about the rise of the CyberFeminist and discusses the evolving definition of identity.
            02:12 The rise of the CyberFeminist
            04:24 A day in the life — how CISOs can learn to speak business
            11:45 How can CISOs keep up with security in the cloud
            14:32 Technami!
            18:00 Address security at the beginning of cloud migration
            20:13 The evolving definition of identity
            Magda Chelly Interview Transcript
            26 min
          • Bryson Bort – CEO of SCYTHE and Founder of GRIMM

            Breaking the Cybersecurity Status Quo

            Bryson shares his energetic and entertaining opinion of the CISO as merely a con-man and tackles the prickly question of whether AI can solve the talent problem.

            • 00:53 The difference between a CIO and a CISO. Aka, the CISO is just a con man.
            • 03:01 The real reason information security is not progressing.
            • 07:00 The interconnected nature of IT makes it easy for ransomware to attack multiple targets, whether they intend to or not.
            • 10:03 Communication is key. Malware communication protocols are the solution to stopping attacks.
            • 13:54 The attackers are wolves in sheep’s clothing.
            • 17:44 What if we could replicate the attacker’s potential space?
            • 24:43 Can AI solve the talent problem?

              • Bryson Bort Interview Transcript

              28 min

            About UberKnowledge

            From the publisher's feed

            Hear from top security practitioners and leading vendors on the latest cybersecurity challenges, best practices and innovations.