Security Weekly
Enterprise Security WeeklySubscribe

That’s An Illusion – ESW #148

Full Audio

View Show Index

Segments

1. Network Detection & Response, ExtraHop – John Smith – ESW – Interview #148

Network Detection & Response (NDR) as a critical component of cloud-first security, both because of the need for east-west visibility across cloud and on-premises assets, and because combining behavioral-based threat detection with signature-based detection gives organizations a better chance of discovering threats quickly enough (and with enough context) to mitigate the damage.

Full Show Notes: https://wiki.securityweekly.com/ES_Episode148

Guest

John Smith
Principal Engineer, Security at Extrahop

John Smith has over twenty years’ experience in IT and Security, including eighteen years as a practitioner before joining ExtraHop. John is a frequent speaker on podcasts and webinars, and has delivered talks at conferences like RSAC and multiple B-Sides events. His experience includes securing and architecting the US Centers for Disease Control’s Pandemic Response and Telework solution in 2007 and pioneering data-driven analytics and investigations.

Hosts

Senior Cyber Advisor at Lawrence Livermore National Laboratory
Chief Product Officer at CyberSaint

2. Joe Gillespie, Netsparker – Joe Gillespie – ESW – Interview #148

Managing vulnerabilities the Enterprise is more than how many assets can you scan but how do you manage the issues that you discover. They will cover usability, easy to use tool, fast deployment, quickly operational, intuitive UI and workflow, discovery, and accuracy.

Full Show Notes: https://wiki.securityweekly.com/ES_Episode148

Guest

Joe Gillespie
Director at Probely

Director – Enterprise Sales – North America

Hosts

Senior Cyber Advisor at Lawrence Livermore National Laboratory
Chief Product Officer at CyberSaint
Principal Security Evangelist at Eclypsium

3. Brandon Edwards, Capsulate8 – Brandon Edwards – ESW – Interview #148

Containers are a hot topic because of the simplicity they bring to the process of software development, shipping, and deployment. It is important to understand the security properties of containers, how they have been escaped in the past, and how they are likely to be escaped in the future.

Full Show Notes: https://wiki.securityweekly.com/ES_Episode148

Guest

Brandon Edwards
Co-Founder and Chief Scientist at Capsule8

Brandon is the Co-founder and Chief Scientist at Capsule8. He is responsible for cybersecurity research strategy and for operationalizing findings into resulting innovations. Prior to Capsule8, Brandon was VP of Threat Labs at BAE Systems, having joined the company through its successful acquisition of SilverSky, where he designed their cloud-based, zero-day prevention product. He has also served as hacker-in-residence at the NYU Tandon School of Engineering, and held senior security roles at TippingPoint and McAfee.

Hosts

Senior Cyber Advisor at Lawrence Livermore National Laboratory
Chief Product Officer at CyberSaint
Principal Security Evangelist at Eclypsium

Related

Threat Modeling and Understanding Inherent Threats – Adam Shostack – ESW #359

This is a great interview with Adam Shostack on all things threat modeling. He's often the first name that pops into people's heads when threat modeling comes up, and has created or been involved with much of the foundational material around the subject. Adam recently released a whitepaper that focuses on and defines inherent threats. Resources: ...
How GenAI Can Improve SecOps – Ely Kahn – ESW #359

We've talked about generative AI in a general sense on our podcast for years, but we haven't done many deep dives into specific security use cases. That ends with this interview, as we discuss how generative AI can improve SecOps with Ely Kahn. Some of the use cases are obvious, while others were a complete surprise to me. Check out this episode if...