Diving into the Tenacious Threats of Cloud Data Lakes
summary
Industry academia and non‑profit collaborators produce a downloadable threat model and a data doctrine framework that emphasizes traceability, ELT pipelines, and human‑in‑the‑loop controls. The model maps threats to STRIDE and OWASP and lists countermeasures for data poisoning, model drift, API‑based tainting, and mis‑labelled training sets. Panel cites over 1,800 breaches in 2022 affecting 422 million users as motivation, describes the tool as a living document, and invites participation via the Cloud Security Alliance working group.
AI-written summary · about
chapters (10)
- 0:00Introduction and panel setup
- 1:52Panelist introductions
- 6:53Importance of data lakes and architectures
- 13:27Data doctrine framework explained
- 15:18Threat modeling approach
- 18:09AI impact on data lake security
- 23:14AI as co-pilot for security
- 31:25Audience Q&A on AI risks
- 36:55Key takeaways and recommendations
- 43:43How to get involved
related talks
40mCloud Threat Modeling - from Architecture Design to Application Development
53mPractical Threat Modeling for real-world and Cloud Situations in our hybrid and W...
32mIntro to Threat Modeling in the Cloud
41mBuilding a Valid Threat Library for Cloud Based Applications
44mCloud Security Essentials
22mEmpowering Developers through Threat Modeling Excellence
41mPrivacy Threat Modeling Analysis of Cloud Services Against Privacy Regulations
33mUnderstanding the Threats and Attacks on Data Science Applications and Models