Recognizing and avoiding cloud security survival mode
summary
Datadog demonstrates a concrete stack: observability (metrics/traces/logs + APM), Cloud SIEM ingesting CloudTrail/GuardDuty, and an agent using eBPF to surface runtime threats and misconfigurations, plus a resource/service catalog for ownership and runbooks. The platform claims it can blocks SSRF at edge using APM-based detections, push a global block list across services, and detect post‑exploit behavior (Log4Shell Java shells). Slides cite 100 days dwell time, average breach > $4M, and a $202.72B security market to justify shifting from reactive alerts to preventative blocking.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 0:24Anaheim
- 2:21Cyber Security Market
- 3:42Security Concerns
- 4:39Datadog
- 8:02Attack landscape
- 8:46TLDR
- 9:20Detection methods
- 12:15Entity context
- 15:05Datadog Security Management
related talks
37mOptimizing Cloud Detection & Response With Security Chaos Engineering
51mSecurity incident monitoring, mitigation & metrics using feature flags
04mPreventative+Detective Control for Security
14mThe origin of cloud security challenges and a revolutionary solution
05mSponsored Keynote: Cloud Security’s Hidden Force: Threat Detection
56mNavigating the Cloud Native Security Landscape
13mA guide to strengthening your threat detection and response
30mBuilding Effective Attack Detection in the Cloud