022 How to add open source code to your applications, securely

SilverLining IL

In this episode we talk with Eran Feigenbaum, CISO of Oracle cloud about the next generation of cloud services - how can we build cloud that is more secure,, immuned to miss-configuration and other pitfalls that are relevant to today's cloud services.

021 Building the next generation of cloud services

In this episode we talk with Menny about Privacy - why it is so hard to define what exactly is privacy in the modern age, what people miss about the concepts of privacy and how this affects our everyday lives. This talk will make you laugh, will make you sad and definitely will make you think. We hope you will enjoy listening to it as much as we enjoyed recording it.

020 The dark side of Privacy

In this episode we talk with Or Kamara, Senior team lead at Synk, about the Capital-one hacking and what can be learned from to better protect our networks. We will analyze the attack step by step and add mitigating controls that can help preventing the next attack.

019 Understanding Cloud Attack Vectors

In this episode we are talking with Bar Hofesh from Neurolegion about the world of automated security testing - what are the challenges, what are the different stages of integration and delivery and how to perform each stage correctly.

018 Testing Cloud Application

Penetration tests are one of the strongest controls that we use. It is testing the overall resilience of our application and allows us to be more confident in our workloads. But in the cloud era, cloud applications pen testing needs to be coordinated with the providers. In this episode, we talk with Oz Avenstein, an application security expert, about the challenges of cloud penetration testing and how to do it correctly.

017 How to do penetration testing in cloud application

Consuming SaaS from various vendors can be a challenging task, the first challenge is to distinguish who are the mature providers that you can trust your data with, and the second challenge is auditing them and their services. In this episode we talk with Tal Arad, former CISO of CEVA logistics about the challenges of selecting SaaS providers and how to auditing them wisely.

Episode 16: Merging cloud based startup into financial giants

Episode 15: Challenges of selecting SaaS providers

Application Secret management is becoming one of the biggest challenges for application security. With cloud, CI/CD and micro services architecture we discover that we are using a growing number of encryption keys, API keys, SSH keys tokens and connection strings. In this episode we talk with Oded HarEven, Founder at A-Key-Less about the challenges of secret management and the way to build secure secret management solution.

Episode 14: DevOps Secret Management

Gaining trust and developing awareness with customers is one of the hardest challenges for providers. It is almost an art. In this episode we talked with Vladi Sandler from Cymotive about creating healthy relationships with customers and how a mixture of personal awareness and technical proficiency are crucial in the customer-provider relationships.

Episode 13: Creating trust & awareness

In this podcast we are talking with Tsachi Lutaty, R&D manager for PlainID, about the move from Role based access controls to Policy based access controls and how organizations can better engineer their authorization scheme and policies.

Episode 12: Diving into authorization and policy bases access controls

IoT present one of the hottest topics in the industry today. In this episode we talk with Eliav Gnessin, CTO for DeviceTone, about securely engineering IoT solution end to end. During the episode Eliav guides us through IoT journey starting from the chipset of the device itself and all the way up to the IoT cloud based management. Eliav will explain about different implementations consideration, latest developments in the market and the efforts made by chipmakers & cloud provider to create more secure IoT.

Episode 11: IoT Security Basics

Fintech companies drive cloud security forward by setting the highest bar of requirements on cloud providers. In this episode we talk with Nir Valtman, Product security leader at Finastra about the challenges of Fintech companies and dive into API Authentication and Authorization best practices and building eco-system that can support trust between banks and young fintech companies

Episode 10: Securing the new fintech economy

Cloud providers has invested heavily in adding visibility, monitoring and logging capabilities of networking and administrative activities. In this session with talk with Shira Shamban, a cloud security expert from Check Point about the challenges of collecting the different logs exist in cloud platforms and the challenges of gaining insights from them.

Episode 9: Challenges with Cloud Management logs

IoT devices such as Medical embedded devices, autonomous vehicle and smart homes are currently the Achilles heel of information security. The technology is advancing fast, but the security frameworks are not advancing at the same pace. In this episode we talk with Beau woods, founder for I-am-the-cavalry, about the steps governments, regulators and vendors should take in order to produce safer IoT devices.

Episode 8: Securing the World of IoT

The SilverLining podcast was created for software and security architects, by software and security architects

hubhopper

SilverLining IL

hubhopper