{"version":1,"type":"rich","provider_name":"Libsyn","provider_url":"https:\/\/www.libsyn.com","height":90,"width":600,"title":"EP266 Resetting the SOC for Code War: Allie Mellen on Detecting State Actors vs. Doing the Basics","description":"Guest: Allie Mellen, Principal Analyst @ Forrester, author of \u201cCode War: How Nations Hack, Spy, and Shape the Digital Battlefield\u201d Topics: Your book focuses on the US, China, and Russia. When you were planning the book did you also want to cover players like Israel, Iran, and North Korea? Most of our listeners are migrating to or operating heavily in the cloud. As nations refine their \u201cdigital battlefield\u201d strategies, does the "shared responsibility model" actually hold up against a nation-state actor? How does a company\u2019s detection strategy need to change when the adversary isn't a teenager looking for a ransom, but a state-funded group whose goal might be long-term persistence or subtle data manipulation? How should people allocate their resources to defending against both of these threats?  How afraid are you of a \u201cbad guy with AI\u201d scenarios? Mild anxiety or apocalyptic fears?  Do you see AI primarily helping "Tier 2" nations close the capability gap with the "Big Three," or does it just further cement the dominance of the nations that own the underlying compute and models? You\u2019ve spent a lot of time as an analyst looking at how enterprises buy and run security tech. For a CISO at (say) mid-tier logistics company, should 'nation-state cyberattacks' even be on their threat model? Or is worrying about the spies just a form of security theater when they haven\u2019t even solved basic credential theft yet? Resource: Video version \u201cCode War: How Nations Hack, Spy, and Shape the Digital Battlefield\u201d by Allie Mellen Allie Mellen substack The source for the original \u201cair defense on the roof\u201d argument (2008) EP255 Separating Hype from Hazard: The Truth About Autonomous AI Hacking EP256 Rewiring Democracy & Hacking Trust: Bruce Schneier on the AI Offense-Defense Balance EP156 Living Off the Land and Attacking Critical Infrastructure: Mandiant Incident Deep Dive \u201cDisrupting the first reported AI-orchestrated cyber espionage campaign\u201d report ","author_name":"Cloud Security Podcast by Google","author_url":"https:\/\/cloud.withgoogle.com\/cloudsecurity\/podcast\/","html":"