Anton’s Security Blog Quarterly Q3 2022

0

Good blog posts are sometimes hard to find (especially on Medium), so I decided to create a periodic list blog with my favorite posts from the last quarter or so.

Here is the next one. The posts below are ordered by lifetime views. This covers both Anton on Security and my Google Cloud blog posts, as well as our cloud security podcast (subscribe).

Top 5 most popular articles of all time (these ended up being the same as last quarter):

  1. “Security Correlation Then and Now: A Sad Truth About SIEM”
  2. “Can we have ‘detection as code’?”
  3. “New Document: ‘The Future of SOC: SOC People – Competencies, Not Levels'”
  4. “New Document: ‘The Future of SOC: Forces Shape Modern Security Operations'”
  5. “Role of Context in Threat Detection”

Top 5 publications with the most Medium fans (these are also the same as the last trimester):

  1. “Security Correlation Then and Now: A Sad Truth About SIEM”
  2. “Warning: Clown-quality SOCs still abound”
  3. “Can we have ‘detection as code’?”
  4. “Why is threat detection difficult?” »
  5. “A SOC Tried To Detect Threats In The Cloud… You Won’t Believe What Happened Next”

Top 5 Google Cloud Security Podcast episodes:

  1. Episode 1 “In Confidentiality”
  2. Episode 47 “Megatrends, Macro-changes, Microservices, Oh My! Changes in 2022 and beyond in cloud security »
  3. Episode 2 “Data Security in the Cloud”
  4. Episode 8 “Zero Trust: Fast Forward from 2010 to 2021”
  5. Episode 3 Automate and/or die?

Random new fun posts:

  1. “Detection as code? No, DETECTION AS KITCHEN”
  2. “How to think about cloud threat detection”
  3. “The SOC is not dead but it could be reborn as a center of excellence for security operations”

Now fun posts by topic.

Security operations / detection & response:

  • “[Infographic] Achieving Autonomous Security Operations: Why Metrics Matter (But Not What You Think) » [GCP blog]
  • “Security Correlation Then and Now: A Sad Truth About SIEM”
  • “Can we have ‘detection as code’?”
  • “New Document: ‘The Future of SOC: SOC People – Competencies, Not Levels'”
  • “Warning: Clown-quality SOCs still abound”
  • “Stop trying to remove the humans from the SOC…Except…Wait…Wait…Wait…”
  • “Revisiting the visibility triad for 2020”
  • “Why is threat detection difficult?” »
  • “A SOC Tried To Detect Threats In The Cloud… You Won’t Believe What Happened Next”
  • “The 10 Best SIEM Log Sources in Real Life?”
  • “Achieving Autonomous Security Operations: Reducing Work” [GCP Blog]

Data security:

  • “How autonomous data security can help define the future of the cloud” [GCP blog]
  • “New White Paper: Designing and Deploying a Data Security Strategy with Google Cloud” [GCP Blog]
  • “The cloud trust paradox: To trust cloud computing more, you need to be able to trust it less” [GCP Blog]
  • “The Paradox of Cloud Trust: 3 Scenarios in Which Encryption Keys May Need to be Kept Outside the Cloud” [GCP Blog]
  • “Data Security and Threat Models”
  • “Lost in Translation: Encryption, Key Management, and Real Security” [GCP Blog]
  • “Thoughts on Modern Data Security”
  • “Improving Security, Compliance, and Governance with Cloud-Based DLP Data Discovery” [GCP Blog]
  • “Transform data to secure it: use Cloud DLP” [GCP Blog]
  • “Not Just Compliance: Reimagining DLP for Today’s Cloud-Centric World” [GCP Blog]

Cloud Security:

  • “How CISOs Should Adapt Their Mental Models for Cloud Security” [GCP blog]
  • “How to think about cloud threat detection” [GCP blog]
  • “A SOC Tried To Detect Threats In The Cloud… You Won’t Believe What Happened Next”
  • “Not the final answer on NDR in the Cloud…
  • “Who does what in cloud threat detection?”
  • “Cloud Migration Security Issues”
  • “Moving to the cloud: a chance to finally transform security?” »
  • “Is your destiny in the cloud? »

Enjoy!

Previous posts in this series:

  • Anton’s Security Blog Quarterly Q2 2022
  • Anton’s Security Blog Quarterly Q1 2022
  • Anton’s Security Blog Quarterly Q4 2021
  • Anton’s Security Blog Quarterly Q3 2021
  • Anton’s Security Blog Quarterly Q2 2021
  • Anton’s Security Blog Quarterly Q1 2021
  • Anton’s Security Blog Quarterly Q3.5 2020


Anton’s Security Blog Quarterly Q3 2022 originally appeared in Anton on Security on Medium, where people are continuing the conversation by highlighting and responding to this story.

*** This is a syndicated blog from the Stories Security Bloggers Network by Anton Chuvakin on Medium written by Anton Chuvakin. Read the original post at: https://medium.com/anton-on-security/antons-security-blog-quarterly-q3-2022-c834a1b7fc6d?source=rss-11065c9e943e——2

Share.

About Author

Comments are closed.