Navigating a cybersecurity event in real time
summary
University systems migrate 90% of critical applications in AWS, run dual offsite backups, and restore operations during four 2022 incidents while building a new layered security posture. A November–December DDoS sequence spikes from thousands to up to 1.5 billion hits but the site stays up because AWS Shield Advanced held. Deployed controls include Kiteworks, Varonis, Cisco Duo and Umbrella, Microsoft Defender, CrowdStrike, 24/7 monitoring, and planned penetration testing; forensic recovery finds a hardware vulnerability and triggers a full incident and continuity redesign.
AI-written summary · about
chapters (9)
- 0:00Introduction and background
- 2:45Relationship with AWS
- 4:47Overview of cyber threats
- 9:01Managing vendor vulnerabilities
- 10:25Major security incidents
- 11:56Crisis response and lessons
- 13:06Mitigating denial of service
- 13:35Strengthening security posture
- 21:28Conclusion and contact info
related talks
52mDDoS Protection at Global Scale — Real Cases and Lessons Learned
35mDefeating Ransomware Attacks
51mProtect your internet-facing web applications hosted on AWS
17mA Resilient Journey
28mAWS security at scale
58mDefend your data at scale: 3 steps to increase cyber security
35mComprehensive protection for Infrastructure and Web Apps
48mCrucial Cyber Hygiene Defenses for 2023