Security Talks 2023
Transform your cybersecurity with frontline intelligence, expertise and AI-powered cloud innovation.October 25, 2023
The promise of digital transformation is being threatened by the increasingly disruptive cyber risk and threat landscape that every organization now faces head-on. Digital transformation requires security transformation, and organizations need security partners with expertise and solutions capable of addressing this new reality.
Google Cloud’s Security Talks virtual event, this cybersecurity awareness month, is designed to help you better understand how to defend against modern threats with modern security solutions.
Hear from experts on the latest threat intel, explore Google Cloud Security AI Workbench and Duet AI, see how multiple different Red Teams are ensuring Pixel, AI systems and more stay secure, and check out all the latest Google Cloud Security product innovations!
To best accommodate varying schedules, our security experts are offering multiple Security Talks sessions per topic throughout the day. Register for your preferred session time below.
Google Cloud’s Security Talks virtual event, this cybersecurity awareness month, is designed to help you better understand how to defend against modern threats with modern security solutions.
Hear from experts on the latest threat intel, explore Google Cloud Security AI Workbench and Duet AI, see how multiple different Red Teams are ensuring Pixel, AI systems and more stay secure, and check out all the latest Google Cloud Security product innovations!
To best accommodate varying schedules, our security experts are offering multiple Security Talks sessions per topic throughout the day. Register for your preferred session time below.
Agenda
search
Time
Title
Overall State of Google Security
Royal Hansen
Opening Keynote
10 Minutes
Royal Hansen
Vice President, Privacy, Safety & Security Engineering
Cloud security threat briefing with Mandiant
Andrew Kopcienski
As organizations increasingly adopt cloud technologies, threat actors have adapted their tactics to exploit vulnerabilities within cloud environments. This threat briefing explores the methods employed by malicious actors to compromise cloud services, including the exploitation of misconfigurations, weaknesses in identity and access management, and shared resources. Attendees will learn how the threat landscape is shifting and how to be more proactive by understanding how the tactics, techniques and procedures are evolving to include cloud infrastructure.
20 Minutes
Andrew Kopcienski
Principal Intelligence Analyst
Reduce exposures before threat actors exploit them
J.R. Wikes
Shifting from reactive to proactive security operations begins with identifying and mitigating exposures that can be exploited by determined threat groups for initial access. With a continuous program of identifying and remediating threats and exposures, security teams can be better prepared to defend against attacks.
25 Minutes
J.R. Wikes
Security Solutions Engineer
A blueprint for modern security operations
Chris Corde
To effectively defend against today’s increasingly sophisticated cyberattacks, security operations teams need a fresh approach. This session will outline how Google Cloud is thinking about modern threat detection, investigation, and response. We’ll explore how organizations can combine reactive and proactive techniques, gain context into threat actor activity, and leverage AI as a force multiplier to keep themselves safer.
20 Minutes
Chris Corde
Director of Product Management, Security
Supercharging defenders with Security AI Workbench and Duet AI
Connie Fan
Explore ways you can use generative AI to protect your organizations from cyberattacks. This session will provide an overview of Google Cloud Security AI Workbench – an industry-first extensible platform powered by a security-focused large language model (LLM) and how it can help defenders like you address threat overload, toilsome tools, and the cyber workforce skills gap. We’ll also cover how Duet AI can help summarize threat intelligence, classify malware, and simulate potential attack paths so you can take action and stay one step ahead of adversaries.
15 Minutes
Connie Fan
Senior Product Lead, Cloud Security
Work safer with new zero trust and digital sovereignty controls in Google Workspace
Johney Burke, Kelly Anderson
Learn how to enable safer work in your organization with Google Workspace. We will show you how our cloud-native, zero trust architecture and Google AI help prevent account takeovers, enforce contextual access, and prevent data loss. You’ll also learn about our new digital sovereignty controls that can help you maintain complete control over your data and prevent access from 3rd-party entities such as Google and foreign governments.
20 Minutes
Johney Burke
Senior Product Manager, Privacy, Sovereignty & Compliance
Kelly Anderson
Product Marketing Manager, Workspace Security
Why Red Teams Play a Central Role in Helping Organizations Secure AI Systems
Daniel Fabian
We recently introduced the Secure AI Framework (SAIF) to help address risks to AI systems and drive security standards for the technology in a responsible manner. This session will explore one critical capability that we deploy to support SAIF: red teaming. It will examine our work to stand up a dedicated AI Red Team and discuss three important areas: 1) what red teaming in the context of AI systems is and why it is important; 2) what types of attacks AI red teams simulate; and 3) lessons we have learned that we can share with participants.
20 Minutes
Daniel Fabian
Head of Google Red Teams
Over the Air, Under the Radar: Attacking and Securing the Pixel Modem
Farzan Karimi
To ensure Google Pixel devices are always at their most secure, the Android Red Team continuously attacks the riskiest areas of the phone, like the modem. This allows us to proactively get ahead of bugs and protect the phone, before it's even shipped to users. This talks will cover examples of over-the-air (OTA) remote code execution (RCE) attacks and how the Android Red Team works closely with both internal and external partners to secure the modem implementation for millions of devices by implementing additional hardening and security mitigations in the modem code, and also evangelized the development of a fuzzing program within the manufacturer's organization.
20 Minutes
Farzan Karimi
Offensive Security Manager, Android
