Preventing Data Breaches

  • Tuesday, 15 Dec 2020 12:30PM EST (15 Dec 2020 17:30 UTC)
  • Speaker: Becca Petrin

Learn how you can use your observability and monitoring to protect your organization from data breaches. In this talk, we will dive into a few famous data breaches, take you through an organization's usual evolution of secret protection, then examine how database credential leaks can be altogether prevented. We will also address the question of - if a breach can't be prevented, can it be detected while it's in progress? '

Top takeaways:

  • There are multiple ways to protect an organization's most precious secrets (like S3 files, AWS secrets manager, HashiCorp Vault, passwordless authentication)
  • Taking a layered approach, or "defense in depth" is best
  • Detecting data breaches in progress requires diligent data science like anomaly detection that may even need to span across users and is a hard problem to solve