Into The Dragon’s Den
summary
Explains concrete risks and concrete mitigations for launching a SaaS product in China: expect mandatory joint ventures/operating partners, government access to China‑resident data under Made in China 2025, and laws that force conflicting disclosures. Recommends a hardened plan: regional cryptographic isolation (separate AWS accounts, segmented IAM), replace GitHub/Jira with Gitea, Prisma Cloud, ZenTao, enforce full secret inventory+rotation, push automated deployment dead drops, run a dedicated insider‑risk team, use travel mode and burner laptops.
AI-written summary · about
chapters (22)
- 0:00Introduction to talk
- 1:02Presenters and disclaimers
- 2:26China's strategic goals
- 3:28Cultural and espionage risks
- 5:54Made in China 2025 plan
- 7:18Joint ventures and coercion
- 8:40Legal compliance conflicts
- 10:49Geopolitics as a weapon
- 12:12Business objections and reality
- 14:38Accepting unavoidable risks
- 16:24Architecture for sovereignty
- 21:40Air gapping limitations
- 23:26Autonomous operations model
- 27:40Debugging and secrets management
- 29:25Insider threat program basics
- 34:14Securing collaboration tools
- 36:40Travel security risks
- 39:51Travel mode and decontamination
- 40:33Defending Chinese infrastructure
- 41:56Security investment opportunities
- 42:59Emergency exit planning
- 43:19Q&A summary
related talks
46mApplication security from start to finish
55mKeynote - Preparing the Long Journey for Data Security
24mProtecting Ourselves from CNCFgate. Software Supply Cha...
32mI Started My Startup. How Do I Secure It?
58mBalancing Security and Agility While Scaling Your Company
46mIn Search of Security Shangri-la
01h 02mThe New Realities of SaaS: Why Building is Harder Than Ever
40mImplementing security from day one at a fintech startup