Head In The Cloud http://myheadinthe.cloud Pinecast (https://pinecast.com) en-CAJohn Svazic John Svazic jsvazic@gmail.com no Head In The Cloud http://myheadinthe.cloud https://storage.pinecast.net/podcasts/covers/3ee873eb-7433-4de3-99fe-50c60e767401/podcast_cover.png episodic Copyright (c) 2017 - John Svazic Security, DevOps, and Life In The Cloud Yes Goodnight, Goodbye, and Good Luck http://myheadinthe.cloud/?post_type=podcast&p=124 Sun, 13 Aug 2017 12:03:04 -0000 00:16:09 Its the final episode of Head In The Cloud, but its not the end of one of your favourite security podcasters! Listen up to hear whats in store for the podcast and why Im shutting down Head In The Cloud. http://myheadinthe.cloud/episode/c18391500f584aaf/goodnight-goodbye-and-good-luck It's the final episode of Head In The Cloud, but it's not the end of one of your favourite security podcasters! Listen up to hear what's in store for the podcast and why I'm shutting down Head In The Cloud.

Some links:

Head In The Cloud was proud to be a part of the GonnaGeek Podcast Network!

Thanks for listening, and have a great week!

]]> no AWS, Breaches, Chihuahuas, and more with Corey Quinn http://myheadinthe.cloud/?post_type=podcast&p=120 Sun, 30 Jul 2017 13:22:08 -0000 00:45:38 I speak with Corey Quinn about AWS and their recent news headlines related to various breaches amongst other things... http://myheadinthe.cloud/episode/e860386addb14a14/aws-breaches-chihuahuas-and-more-with-corey-quinn I speak with Corey Quinn about AWS and their recent news headlines related to various breaches amongst other things...

Corey Quinn joins me on today's podcast to talk about AWS and how they've been in the news lately for all the wrong reasons. We talk about the shared security model, things we like and may not like so much about AWS, as well as ... chihuahuas? You'll need to listen to get the full story.

Some links:

Head In The Cloud is proud to be part of the GonnaGeek Podcast Network!

Want to get in touch?  Want to join the discussion on Slack? Feel free to reach out!

Thanks for listening, and have a great week!

]]> no Disaster Recovery In The Cloud http://myheadinthe.cloud/?post_type=podcast&p=115 Sun, 23 Jul 2017 14:01:45 -0000 00:47:32 A brief look at disaster recovery and how it applies to the cloud. http://myheadinthe.cloud/episode/adeb812ea5c04868/disaster-recovery-in-the-cloud A brief look at disaster recovery and how it applies to the cloud.

Disaster recovery is an important part of any security plan you have for your organization. Disaster recovery in the cloud is equally important but is often overlooked. In this episode I take a look at different levels of disaster recover, how to apply them to the cloud and some ideas for defining your own disaster recovery plan.

Some links:

Head In The Cloud is proud to be part of the GonnaGeek Podcast Network!

Want to get in touch? Feel free to reach out!

Thanks for listening, and have a great week!

]]> no Uncovering flAWS In Your AWS Cloud Environment http://myheadinthe.cloud/?post_type=podcast&p=111 Sun, 16 Jul 2017 13:54:51 -0000 00:41:28 Scott Piper (@0xdabbad00) joins me to talk about flAWS, a website he created that is part capture the flag (CTF), red/blue team training, AWS security guide and honeypot! http://myheadinthe.cloud/episode/9c2ce17069f24cd8/uncovering-flaws-in-your-aws-cloud-environment Scott Piper (@0xdabbad00) joins me to talk about flAWS, a website he created that is part capture the flag (CTF), red/blue team training, AWS security guide and honeypot!

Lots of interesting topics of discussion in this episode you definitely don't want to miss!

Some links:

Head In The Cloud is proud to be part of the GonnaGeek Podcast Network!

Want to get in touch? Feel free to reach out!

Thanks for listening, and have a great week!

]]> no IaaS, PaaS, and SaaS – Oh My! http://myheadinthe.cloud/?post_type=podcast&p=109 Sun, 09 Jul 2017 13:22:34 -0000 00:48:10 Looking at the different *aaS solutions, what they are and what the security concerns around them are. http://myheadinthe.cloud/episode/42c4f6454eec4d3d/iaas-paas-and-saas-oh-my- Looking at the different *aaS solutions, what they are and what the security concerns around them are.

The big three! The "ah-s" or "as-s" if you will. I discuss what IaaS, PaaS, and SaaS are, what they stand for and what security related concerns you should have regarding each one.

Some links:

Proud to be part of the GonnaGeek Podcast Network!

Want to get in touch? Feel free to reach out!

Thanks for listening, and have a great week!

]]> no Malware – What Can We Do About It? http://myheadinthe.cloud/?post_type=podcast&p=106 Sun, 02 Jul 2017 17:07:08 -0000 00:39:30 I talk about Malware and some protections we can take in preventing its spread. http://myheadinthe.cloud/episode/4b01c51ba52e446f/malware-what-can-we-do-about-it- I talk about Malware and some protections we can take in preventing its spread.

Today's episode is all about Malware - what can we do to protect ourselves, what are some best practices we can follow, etc. I'm a firm believer that Malware is something we can help curtail if we all do our part in protecting ourselves. The fewer systems there are to infect, the less common it will be.

Some links:

Happy to be part of the GonnaGeek Podcast Network!

Want to get in touch? Feel free to reach out!

Thanks for listening, and have a great week!

]]> no DevSecOps and Rugged DevOps with Anurag “Archie” Agarwal http://myheadinthe.cloud/?post_type=podcast&p=103 Sun, 25 Jun 2017 17:27:39 -0000 00:31:36 I speak with Anurag “Archie” Agarwal from ThreadModeler about DevSecOps, Rugged DevOps, their differences and a bit about threat modeling. http://myheadinthe.cloud/episode/dada75997bec4eba/devsecops-and-rugged-devops-with-anurag-archie-agarwal I speak with Anurag “Archie” Agarwal from ThreadModeler about DevSecOps, Rugged DevOps, their differences and a bit about threat modeling.

In this episode I speak with "Archie" Agarwal about DevSecOps and Rugged DevOps before venturing off to some other topics. Great interview, Archie is very knowledgable and a great guest! Have a listen and make sure to look up his company if you're in the market for threat modeling to increase your security posturing.

Contact info for Archie:

Happy to be part of the GonnaGeek Podcast Network!

Want to get in touch?  Feel free to reach out!

Thanks for listening, and have a great week!

]]> no The Different Colours of Security http://myheadinthe.cloud/?post_type=podcast&p=101 Sun, 18 Jun 2017 17:29:19 -0000 00:43:38 In this episode, I take a look at the different colours that often come up in security discussions, such as black, white, red, blue, gray, and purple! Looking at each one in turn as well as figuring out what they mean is the purpose of this episode. An http://myheadinthe.cloud/episode/f85e3ac75a4c4ff0/the-different-colours-of-security In this episode, I take a look at the different colours that often come up in security discussions, such as black, white, red, blue, gray, and purple! Looking at each one in turn as well as figuring out what they mean is the purpose of this episode. And people thought InfoSec was boring...

Happy to be part of the GonnaGeek Podcast Network!

Want to get in touch? Feel free to reach out!

Thanks for listening, and have a great week!

]]> no Let’s Talk About IDSs! http://myheadinthe.cloud/?post_type=podcast&p=99 Sun, 11 Jun 2017 16:15:20 -0000 00:53:28 Taking a look at IDSs, what they are, how they work and how they relate to cloud security. http://myheadinthe.cloud/episode/5d301b148fa74d1a/let-s-talk-about-idss- Taking a look at IDSs, what they are, how they work and how they relate to cloud security.

In this week's podcast I take a look at Intrusion Detection Systems (IDSs), what they are, what they do, how they work and how they fit into a cloud security model. I went a bit long on this one but I think it's necessary given the breadth of this topic.

Some useful links from this podcast:

Want to get in touch? Feel free to reach out!

Thanks for listening, and have a great week!

]]> no Data Residency and Privacy with Ishay Tentser http://myheadinthe.cloud/?post_type=podcast&p=93 Sun, 04 Jun 2017 18:05:14 -0000 00:38:15 I speak with Ishay Tentser, CEO of IniTech-Digital Products & Innovation, about Data Residency and Privacy. http://myheadinthe.cloud/episode/72d94541864044db/data-residency-and-privacy-with-ishay-tentser I speak with Ishay Tentser, CEO of IniTech-Digital Products & Innovation, about Data Residency and Privacy.

In this week's podcast I welcome Ishay Tentser to discuss data residency, privacy and law. This is an important topic that can get overlooked as you focus on security, but with a global economy, it's important to keep it at the forefront. Ishay is the CEO of IniTech-Digital Products & Innovation and was kind enough to join me from Jerusalem, Israel to discuss this important topic. Definitely not one you want to miss! You can reach Ishay via his email address, ishay@initech.co.il.

Some useful links from this podcast:

Want to get in touch? Feel free to reach out!

Thanks for listening, and have a great week!

]]> no Relationships and Soft Skills http://myheadinthe.cloud/?post_type=podcast&p=92 Sun, 28 May 2017 22:31:54 -0000 00:45:03 Are you a security dictator or a respected colleague? Soft skills and relationship building are on the menu for this episode! http://myheadinthe.cloud/episode/9ec4259121fc43e4/relationships-and-soft-skills Are you a security dictator or a respected colleague? Soft skills and relationship building are on the menu for this episode!

Taking a bit of a different turn in this episode. I will be looking at relationship building, whom to start with and who may require a softer touch. Do you want to be the security dictator or someone who is viewed as a peer? Fears or respected? Have a listen!

Want to get in touch? Feel free to reach out!

Thanks for listening, and have a great week!

]]> no A high level overview of DevOps and Related Tools http://myheadinthe.cloud/?post_type=podcast&p=90 Sun, 21 May 2017 21:11:23 -0000 00:52:27 In todays podcast I take a look at system provisioning and the tools your DevOps team may want to look into, and how these tools can help increase your security stance in the cloud! http://myheadinthe.cloud/episode/f3feabe3b3324ac5/a-high-level-overview-of-devops-and-related-tools In today's podcast I take a look at system provisioning and the tools your DevOps team may want to look into, and how these tools can help increase your security stance in the cloud!

Back from a mini-break for Mother's Day, in today's podcast I take a look at system provisioning and the tools your DevOps team may want to look into, and how these tools can help increase your security stance in the cloud! Tools like Chef, Puppet, Terraform and Cloudformation are on the agenda and can be invaluable for success in your adventures in the cloud!

Some links:

Want to get in touch? Feel free to reach out!

Thanks for listening, and have a great week!

]]> no Interview with Loïc Simon about Scout2 http://myheadinthe.cloud/?post_type=podcast&p=87 Sun, 07 May 2017 21:30:58 -0000 00:37:03 I interview Loïc Simon about Scout2, a great tool to help assess your security posturing on AWS! http://myheadinthe.cloud/episode/f83ddb9d675d4ab9/interview-with-lo-c-simon-about-scout2 I interview Loïc Simon about Scout2, a great tool to help assess your security posturing on AWS!

In this episode I speak with Loïc Simon, the author of Scout2, a great tool to assess your security posture on AWS. We cover what Scout2 is, why it came about and how it differs from other tools like AWS Trusted Advisor. It's a great interview with an author of a great tool, so definitely check it out! You can reach Loic on Twitter (links below).

Some links:

Want to get in touch? Feel free to reach out!

Thanks for listening, and have a great week!

]]> no CIS AWS Foundations Benchmark – Sections 2-4 http://myheadinthe.cloud/?post_type=podcast&p=85 Sun, 30 Apr 2017 23:33:19 -0000 00:43:44 Completing our review of the CIS AWS Foundations Benchmark, sections 2 through 4. http://myheadinthe.cloud/episode/10bf3da5b4d94e03/cis-aws-foundations-benchmark-sections-2-4 Completing our review of the CIS AWS Foundations Benchmark, sections 2 through 4.

In this episode we will finish off the remaining sections of the CIS AWS Foundations Benchmark, looking at sections 2 through 4. Lots of good stuff in here, including a number of things you may not have considered if you're new to AWS, so it's definitely worth a listen!

Some links:

Want to get in touch? Feel free to reach out!

Thanks for listening, and have a great week!

]]> no CIS AWS Foundations Benchmark – Section 1 http://myheadinthe.cloud/?post_type=podcast&p=83 Sun, 23 Apr 2017 23:44:41 -0000 00:28:17 In this our second episode, we look at the first section of the CIS AWS Foundations Benchmark and answer the question, what should you do first to lock down your cloud systems? http://myheadinthe.cloud/episode/a69ad89f4c3942e4/cis-aws-foundations-benchmark-section-1 In this, my second episode, I look at the first section of the CIS AWS Foundations Benchmark and answer the question, what should you do first to lock down your cloud systems?

In the second episode of the podcast I take a look at some first steps in securing your AWS account by looking at the Center for Internet Security's AWS Foundations Benchmark! Since this is a long benchmark, we will be focusing on Section 1 in this podcast, with the remaining sections in a follow-up podcast.

Some links:

Want to get in touch? Feel free to reach out!

Thanks for listening, and have a great week!

]]> no 5 Cloud Security Misconceptions http://myheadinthe.cloud/?post_type=podcast&p=76 Mon, 17 Apr 2017 04:01:53 -0000 00:34:25 Meet the host and hear about 5 common cloud security misconceptions and why you should ignore them. http://myheadinthe.cloud/episode/c7e562a9044e4f96/5-cloud-security-misconceptions Meet the host and hear about 5 common cloud security misconceptions and why you should ignore them.

In this first podcast I introduce myself and then cover 5 common security misconceptions related to cloud computing, in no particular order. Still getting my bearings, so please bear with me.

Some links:

Want to get in touch? Feel free to reach out!

Thanks for listening!

]]> no