How a Secure Enterprise Starts with the Web
summary
Claim: treating the browser like an operating system reduces enterprise exposure by enforcing controls and signals at the edge. Chrome ships managed policies, telemetry connectors to Splunk and CrowdStrike, and ML-powered Safe Browsing that classifies novel phishing and malware. Google reports universal hard token security key use cuts successful phishing for employees for over a decade, and security fixes can be rolled out within 24 hours. Recommendations: enforce MFA and keys, keep browsers updated, and ingest browser telemetry into detection and response.
AI-written summary · about
chapters (15)
- 0:00Introduction and speakers
- 2:30Evolving web security for enterprises
- 5:05Modern web security threats
- 6:10Chrome’s security and customization
- 9:03Case studies and real-world impact
- 11:34Threat Analysis Group’s mission
- 13:22Identifying and isolating threats
- 15:08Best practices for secure browsing
- 17:45Patching vulnerabilities in Chrome
- 19:34AI and machine learning in security
- 22:47AI’s broader impact on enterprises
- 25:38Economic impact on cybersecurity talent
- 27:47Advice for security professionals
- 29:35Future outlook for enterprise security
- 33:27Q&A session
related talks
31mChromebooks and network motes to enforce security posture from the device to the cloud
22mChrome Browser for Enterprise 2018 and Beyond
19mWeb Platform Security
41mChrome Security Secret Sauce
36mProtecting Users from Deception
42mThe Perilous Future of Browser Security
40mSecurity, an Enterprise perspective
51mWeb Platform: The Secure Parts