<description>&lt;p dir="ltr"&gt;Guest:&lt;/p&gt; &lt;ul&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;&lt;a href= "https://www.linkedin.com/in/daniel-shechter/"&gt;Daniel Shechter&lt;/a&gt;, Co-Founder and CEO at &lt;a href="https://www.miggo.io/"&gt;Miggo Security&lt;/a&gt;&lt;/p&gt; &lt;/li&gt; &lt;/ul&gt; &lt;p dir="ltr"&gt;Topics:&lt;/p&gt; &lt;ul&gt; &lt;li dir="ltr" role="presentation"&gt;Why do we need Application Detection and Response (ADR)? BTW, how do you define it?&lt;/li&gt; &lt;li dir="ltr" role="presentation"&gt;Isn’t ADR a subset of CDR (for cloud)?  What is the key difference that sets ADR apart from traditional EDR and CDR tools?&lt;/li&gt; &lt;li dir="ltr" role="presentation"&gt;Why can’t I just send my application data - or eBPF traces - to my SIEM and achieve the goals of ADR that way?&lt;/li&gt; &lt;li dir="ltr" role="presentation"&gt;We had RASP and it failed due to instrumentation complexities. How does an ADR solution address these challenges and make it easier for security teams to adopt and implement?&lt;/li&gt; &lt;li dir="ltr" role="presentation"&gt;What are the key inputs into an ADR tool?&lt;/li&gt; &lt;li dir="ltr" role="presentation"&gt;Can you explain how your ADR correlates cloud, container, and application contexts to provide a better  view of threats? Could you share real-world examples of types of badness solved for users?&lt;/li&gt; &lt;li dir="ltr" role="presentation"&gt;How would ADR work with other application security technologies like DAST/SAST, WAF and ASPM?&lt;/li&gt; &lt;li dir="ltr" role="presentation"&gt;What are your thoughts on the evolution of ADR?&lt;/li&gt; &lt;/ul&gt; &lt;p dir="ltr"&gt;Resources:&lt;/p&gt; &lt;ul&gt; &lt;li dir="ltr" role="presentation"&gt;&lt;a href= "https://docs.google.com/spreadsheets/d/1dlT7Cwf4A_PCuAQQ7rMRklSdtK0IxJgULBYgbB_UFNU/edit?resourcekey=0-bF-89cS35lX2HPSzU5_S_w#gid=0"&gt; EP157 Decoding CDR &amp; CIRA: What Happens When SecOps Meets Cloud&lt;/a&gt;&lt;/li&gt; &lt;li dir="ltr" role="presentation"&gt;&lt;a href= "https://cloud.withgoogle.com/cloudsecurity/podcast/ep143-cloud-security-remediation-the-biggest-headache/"&gt; EP143 Cloud Security Remediation: The Biggest Headache?&lt;/a&gt;&lt;/li&gt; &lt;li dir="ltr" role="presentation"&gt;&lt;a href= "https://www.miggo.io/resources/albeast-security-advisory-alb-vulnerability"&gt; Miggo research re: vulnerability ALBeast&lt;/a&gt;&lt;/li&gt; &lt;li dir="ltr" role="presentation"&gt;&lt;a href= "https://medium.com/anton-on-security/whatdr-or-what-detection-domain-needs-its-own-tools-59cb778f5d06"&gt; “WhatDR or What Detection Domain Needs Its Own Tools?”&lt;/a&gt; blog&lt;/li&gt; &lt;li dir="ltr" role="presentation"&gt;&lt;a href= "https://betterappsec.com/making-sense-of-the-application-security-product-market-b659a8e81b6b"&gt; “Making Sense of the Application Security Product Market”&lt;/a&gt; blog&lt;/li&gt; &lt;li&gt;&lt;a href= "https://www.amazon.com/Effective-Vulnerability-Management-Vulnerable-Ecosystem/dp/1394221207"&gt; “Effective Vulnerability Management: Managing Risk in the Vulnerable Digital Ecosystem“&lt;/a&gt; book&lt;/li&gt; &lt;/ul&gt;</description>

Cloud Security Podcast by Google

Anton Chuvakin

EP194 Deep Dive into ADR - Application Detection and Response

OCT 14, 202430 MIN
Cloud Security Podcast by Google

EP194 Deep Dive into ADR - Application Detection and Response

OCT 14, 202430 MIN

Description

Guest:

Topics:

  • Why do we need Application Detection and Response (ADR)? BTW, how do you define it?
  • Isn’t ADR a subset of CDR (for cloud)?  What is the key difference that sets ADR apart from traditional EDR and CDR tools?
  • Why can’t I just send my application data - or eBPF traces - to my SIEM and achieve the goals of ADR that way?
  • We had RASP and it failed due to instrumentation complexities. How does an ADR solution address these challenges and make it easier for security teams to adopt and implement?
  • What are the key inputs into an ADR tool?
  • Can you explain how your ADR correlates cloud, container, and application contexts to provide a better  view of threats? Could you share real-world examples of types of badness solved for users?
  • How would ADR work with other application security technologies like DAST/SAST, WAF and ASPM?
  • What are your thoughts on the evolution of ADR?

Resources: