Episode 14: Cheslocked and loaded

Published: June 13, 2018, 6 a.m.

b'Do you need data captured that let you know when things don\\u2019t look quite right? Need to identify issues before they become major problems for your organization? Turn to Threat Stack, which has Cloud issues of its own, and helps its customers with their Cloud issues.\\nToday, I\\u2019m talking to Pete Cheslock, who runs technical operations at Threat Stack, which handles security monitoring, alerting, and remediation. The company uses Amazon Web Services (AWS), but its customer base can run anywhere. \\xa0\\nSome of the highlights of the show include:\\n\\nChallenges Threat Stack experienced with AWS and how it dealt with them\\nThreat Stack helps companies improve their security posture in AWS\\nSecurity shouldn\\u2019t be an issue, if providers do their job; shared responsibility\\nEducation is needed about what matters regarding security, avoiding mistakes\\nCloud is still so new; not many people have abroad experience managing it\\nScanning customer accounts against best practices to identify risks\\nThreat Stack\\u2019s scanning tool is worthwhile, but most tools lack judgement and perspective\\nThreat Stack offers context between host- and Cloud-based events; tying data together is the secret sauce\\nYou shouldn\\u2019t have to pay a bunch of money to have a robust security system\\nGood operations is good security; update, patch, track, and perform other tasks\\nLack of validation about what services are going to be a successful or not\\nVendor Lock-in: Understand your choices when building your system\\nPervasiveness and challenge of containerization and Kubernetes\\nCloud reduces cycle time and effort to bring a product to market\\nAmazon is a game changer with what it allows you to do and solve problems\\n\\nLinks:\\n\\nPete Cheslock\\nDigital Ocean\\nThreat Stack\\nAWS\\nre:Invent\\nKubernetes'