Guest: <ul> <li><a href= "https://www.linkedin.com/in/maddie-stone-192a6544/">Maddie Stone</a>, Security Researcher @ Google</li> </ul> Topics: <ul> <li>How do we judge the real risk of being attacked using an exploit for a zero day vulnerability? Does the zero day risk vary by company, industry, etc? </li> <li>What does pricing for zero days tell us, if anything? Are prices more driven by supply or demand these days?</li> <li>What security controls or defenses are useful against zero days including against chained zero days?</li> <li>Where are the cloud zero days? We get lots of attention on iOS and Android, what about the cloud platforms? </li> <li>So, how do we solve the paradox of zero days, are they more scary than risky or more risky than scary? Or both?</li> </ul> Resources: <ul> <li style="font-weight: 400;" aria-level="1"><a href= "https://googleprojectzero.blogspot.com/">Project Zero blog </a></li> <li style="font-weight: 400;" aria-level="1"><a href= "https://googleprojectzero.blogspot.com/2022/02/a-walk-through-project-zero-metrics.html"> A walk through Project Zero metrics</a></li> <li style="font-weight: 400;" aria-level="1"><a href= "https://blog.google/threat-analysis-group/">Threat Analysis Group (TAG) blog</a></li> </ul>

EP58 SOC is Not Dead: How to Grow and Develop Your SOC for Cloud and Beyond

Cloud Security Podcast by Google focuses on security in the cloud, delivering security from the cloud, and all things at the intersection of security and cloud. Of course, we will also cover what we are doing in Google Cloud to help keep our users' data safe and workloads secure. 

We’re going to do our best to avoid security theater, and cut to the heart of real security questions and issues. Expect us to question threat models and ask if something is done for the data subject’s benefit or just for organizational benefit. 

We hope you’ll join us if you’re interested in where technology overlaps with process and bumps up against organizational design. We’re hoping to attract listeners who are happy to hear conventional wisdom questioned, and who are curious about what lessons we can and can’t keep as the world moves from on-premises computing to cloud computing.