This episode is sponsored by the CIO Innovation Insider Offense and Defense Community.
My guest this week is David Cross and it is my second discussion with him. I loved talking to David when he was on the Microsoft side of the fence. Two years later, he is on the Google side of the fence as a Cloud Security Engineering Director, and I decided to bring him back on for another fun conversation.
We discuss Google’s on-premises Solutions, Data Custodian Model (SAP), the story behind BeyondCorp, Google’s beta product, called Identity-Aware Proxy and much more. Our conversation is a deep dive into IT Security and highly technical… Regardless of your title within IT Security realm, you will benefit from this conversation.
Major Take-Aways From This Episode:
- Google’s beta product – Identity-Aware Proxy (IAP) service,
- BeyondCorp Model at Google and Anti-Phishing,
- Importance of two-factor authentication; U2F Security Keys, FIDO U2F Protocol, OAuth,
- YubiKeys – security keys for two-factor authentication,
- Gsuites – Gmail, Docs, Drive and Calendar for business, everything in one package,
- Building trust in cloud service provider (Google 9 layer stack)
- Data Custodian Model at Google
- access transparency,
- identity and protection
- Google Cloud Blog article about Google’s custom chip Titan.
About David Cross
David is the Cloud Security Engineering Director in the Google Security and Privacy organization. David is a long time innovator of security technology stemming back to US Navy service with the aviation electronic warfare community and his previous 18 years spent with Microsoft in numerous security product and engineering leadership roles. In addition, David has been a contributing author on a number of whitepapers and Microsoft Press books regarding security and PKI. David holds a B.S. in Computer Information Systems as well as an MBA in MIS.
How to get in touch with David Cross:
- An Insider’s Look at Security at Microsoft Azure – Assume the Breach! – #1 Interview with David for RedZone Podcast
- David Cross: RSA conference Speaker Profile
- What Is Needed in the Next Generation Cloud Based Platform? – Presentation at RSA 2017
- Google Cloud Platform Podcast
This episode is sponsored by the CIO Innovation Insider Offense and Defense Community, dedicated to Business Digital Leaders who want to be a part of 20% of the planet and help their businesses win with innovation and transformation.
* Outro music provided by Ben’s Sound
Leave a Review
If you enjoyed this episode, then please consider leaving an iTunes review here
Click here for instructions on how to leave an iTunes review if you’re doing this for the first time.