Rethinking Cybersecurity Best Practices with Andy Martin (ControlPlane, CNCF's Tag Security)
In the first episode of Nerding Out With Viktor, Viktor Petersson talks with Andy Martin, founder of ControlPlane and co-chair of CNCF’s TAG Security, about cybersecurity best practices and real-world issues.
This episode covers how common security failures happen, why even large companies get hacked, and what actually works when it comes to protecting systems.
Topics discussed include
What penetration testing does and does not show
How social engineering attacks work
The roles of white hat, black hat, and grey hat hackers
On-premise vs. cloud security
The limits of certifications like SOC 2 and ISO 27001
How zero trust networks work
A practical threat modeling example for IoT devices
What software supply chain security and SBOMs mean in practice
This is a practical conversation for people working in tech, security, or anyone interested in how modern systems are attacked and defended.
Like and subscribe if you want to hear more conversations like this.
Timestamps
00:00 –Introduction and Guest background
03:18 –Security basics: penetration testing and social engineering
10:52 –Cloud vs. on-prem and common security myths
20:56 – Compliance, VLAN misconceptions, and zero trust
30:30 – Threat modeling and device-level security
44:37 – Supply chain security and authentication methods
58:39 – Closing remarks
Related events & webinars
View allIs the Internet on Fire? Strategies for Mitigating Open Source Software Vulnerabilities - Andrew Martin, ControlPlane & Michael Lieberman, Kusari
Open source is deployed everywhere, but is no longer trusted by default. Supply chain attacks via package registries, GitHub, and various accidental and entirely understandable vulnerabilities have proven that nothing is entirely secure.
Invisible Infiltration of AI Supply Chains: Protective Measures from Adversarial Actors - Torin van den Bulk, ControlPlane
Malicious human and AI actors can infiltrate AI supply chains, compromising the integrity and reliability of the resultant AI systems through training data tampering, software or model backdoors, model interference, or new runtime attacks.
Kubernetes AI Security Playbook: Safeguarding the Data and Model Supply Chain - Andrew Martin & Jack Kelly, ControlPlane
In our quest for AI innovation we often overlook the unique security challenges that come with the AI supply chain: data and model management.
Speak to an expert
Engage with world-leading AI and cloud security specialists