Easy Prey5 Jan 2022

How Secure is "In the Cloud?" with Randall Magiera

Just because something is in the cloud, doesn't always mean that it is safe and secure and that you don't play a role in keeping it that way. Those who move into the cloud need to understand cloud security best practices and how to implement them.

Today's guest is Dr. Randall Magiera. Dr. Magiera is a cybersecurity professional with over 15 years of experience in security management, change management, risk analysis, intrusion prevention and detection systems, and vulnerability assessments. He has a doctorate of science in cybersecurity, multiple advanced degrees in cybersecurity and technology, and certifications too numerous to list.

Show Notes:

[1:00] - Randall introduces himself and his background in the field.
[3:05] - Things regarding cloud technology have advanced greatly in the last 15 years.
[4:09] - These cloud companies do go to great lengths to keep things as secure as possible.
[5:16] - The shared responsibility model is important to understand.
[6:44] - Large cloud providers do offer some education on best practices to users.
[8:01] - Breaches are causing the public to place blame on large companies like Amazon and Google, but it is more related to users not being familiar with how to use the product.
[10:47] - A lot of the time, the goal is speed in developing a program, app, or product and security sometimes gets pushed aside.
[12:33] - Chris shares a funny story about crypto-mining.
[14:48] - Randall explains a recent crypto-mining code placed in a javascript library.
[17:50] - Chris and Randall discuss the Colonial Pipeline Attack.
[20:00] - A CDN is great for organizations with employees all over the world working in the same program.
[23:31] - Ideally, the goal is to have everything stored in the cloud rather than on devices.
[25:00] - Malicious actors are motivated by money and they will use the cloud in creative ways as a means to an end.
[26:53] - Randall believes that we will be seeing the use of deep fakes more often in coming years.
[28:50] - Cloud computing gives users virtually endless capabilities which means that people who are malicious can use them for advanced attacks as well.
[31:51] - Per terms and conditions, if you delete data, it is on you.
[34:04] - Once something is deleted from the cloud, it is gone forever.
[36:21] - Randall describes how AWS works regarding backups.
[38:18] - When it comes to disaster recovery, especially for businesses, there is an option for data backup that will create a quick turn around if something happens.
[41:51] - Always test your backups and DR.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

Links and Resources:

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(329)

Job Recruiter Scams

Job hunting is hard enough without having to stop and ask whether the recruiter in your inbox is even real. My guest today, Jay Jones, ran into that problem firsthand after being laid off in December ...

24 Jun 35min

Bail Bonds Scams

Getting a call that someone you love has been arrested is scary enough. Getting that call from someone who sounds official, knows just enough to seem credible, and says you have to send money right aw...

17 Jun 36min

Confessions of a Fraudster

Technology keeps changing, but many of the most effective scams still come down to something very human: trust. My guest today is Tony Sales, co-founder of We Fight Fincrime and Underworld TV. Tony ha...

10 Jun 54min

Personal Safety

Scams and safety threats don't always announce themselves. Sometimes they start quietly, with a moment of distraction, a strange feeling you ignore, or a situation that shifts just enough to test whet...

3 Jun 43min

Data For Sale

Everyday conveniences ask for tiny pieces of information all the time like a phone number at checkout, a zip code at the register, an email address for a receipt, or a loyalty account for a small disc...

27 Mai 43min

Exploiting Psychology

Scams are often explained as a failure of judgment, but the truth is far more human. People are not fooled because they are foolish. They are manipulated at the exact moment emotion overrides logic, w...

20 Mai 45min

Investment Traps

Investment losses can be confusing because they do not always tell the whole story. Sometimes money is lost because the market has changed. Other times, an investor was sold something they did not und...

13 Mai 47min

Elder Exploitation

Aging parents often rely on the people closest to them for help, but what happens when that help becomes a way to take control? For Charles Wallace, the warning signs started small. His mother's fridg...

6 Mai 39min