Season 1 · Episode 233
EP233 Product Security Engineering at Google: Resilience and Security
Cloud Security Podcast by Google · Anton A Chuvakin
July 7, 202525m 44s
Audio is streamed directly from the publisher (traffic.libsyn.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
Guest:
- Cristina Vintila, Product Security Engineering Manager, Google Cloud
Topic:
- Could you share insights into how Product Security Engineering approaches at Google have evolved, particularly in response to emerging threats (like Log4j in 2021)?
- You mentioned applying SRE best practices in detection and response, and overall in securing the Google Cloud products. How does Google balance high reliability and operational excellence with the needs of detection and response (D&R)?
- How does Google decide which data sources and tools are most critical for effective D&R?
- How do we deal with high volumes of data?
Resources:
- EP215 Threat Modeling at Google: From Basics to AI-powered Magic
- EP117 Can a Small Team Adopt an Engineering-Centric Approach to Cybersecurity?
- Podcast episodes on how Google does security
- EP17 Modern Threat Detection at Google
- EP75 How We Scale Detection and Response at Google: Automation, Metrics, Toil
- Google SRE book
- Google SRS book