Anna Belak
- Director of Thought Leadership, Sysdig
Boston
Cloud and container security deep thoughts @sysdig. Gamer, PhD physicist, cat lady, ex-Gartner analyst. Opinions my own.
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Anna Belak
Threat Detection on Cloud-Native Attack Surfaces
Originally published by Sysdig. Written by Anna Belak. Public cloud infrastructure is, by now, the default approach to both spinning up a new venture from scratch and rapidly scaling your business. From a security perspective, this is a brand new (well, by now more than a decade old) attack surface.
Anne Belak de Sysdig annonce que 2024 verra une augmentation des surfaces d'attaques – Global Security Mag Online
Anne Belak de Sysdig annonce que 2024 verra une augmentation des surfaces d’attaques Anna Belak, Director, Office of Cybersecurity Strategy chez Sysdig, pense que les dangers qui seront à surveiller en 2024 sont liés à la surface d’attaque grandissante générée par l’intelligence artificielle générative. Cette augmentation de la surface d’attaque sera le nouveau terrain de jeu des cybercriminels.
Cryptojacking: The high cost of free money
Tech News Tube is a real time news feed of the latest technology news headlines.Follow all of the top tech sites in one place, on the web or your mobile device.
Cryptojacking: The high cost of free money
If I offered you free money, what would your first response be? For those of us in the security industry, the first thought is probably what the catch is. In the case of cryptojacking, the catch is that all the costs are covered by someone else. Cloud infrastructure deployments are the bedrock below many companies today. However, that same infrastructure is getting targeted by threat actors that can spot opportunities to earn cash for themselves.
Cryptojacking: Low Risk for Them, High Cost for You
Cyber attacks targeting cloud infrastructure are becoming more prevalent every year. Threat actors leverage the same aspects of massive infrastructure scalability, rapid deployment, and automation that drive legitimate businesses to digital transformation. We now have substantial evidence that organizations have suffered real financial damages due to cryptojacking. Could your company weather a surprise £345,000 increase in your cloud bill?
Cloud Security: Turns Out We Needed Another Acronym (CNAPP)
Gartner’s 2023 “Market Guide for Cloud-Native Application Protection Platforms” (CNAPP) caused some security leaders to question whether they need yet another tool to protect the complex beast that is the cloud. Procuring yet another shiny security product is probably not how you earn the envy of your peers, but if your organization relies on shipping secure applications fast, then CNAPP should be on your radar. What exactly is CNAPP?
Agent-based vs. agentless approaches -- how to implement cloud security
Florida Woman Takes a $7 DoorDash Delivery Order, Picking up 83 Pizzas Because it was 4 Miles, and Only Gets $50 Tip
Agent-based vs. agentless approaches -- how to implement cloud security
Tech News Tube is a real time news feed of the latest technology news headlines.Follow all of the top tech sites in one place, on the web or your mobile device.
Agent-based vs. agentless approaches -- how to implement cloud security
Implementing your security approach will depend on how you can translate your approach from strategy into reality. As part of this, you will have to make decisions on what tools you use based on the functions that they cover, how they help you create and use data, and how they work. This latter part is important as all security professionals have their own preferences. One of the big debates here is whether you use agent-based or agentless tools.
Cryptojacking: Free Money for Attackers, Huge Cloud Bill for You
Cryptojacking attacks can cost victims hundreds of thousands of dollars with minimal effort from attackers. Cryptomining refers to the computational act of validating transactions on a blockchain. Miners are rewarded with cryptocurrency for performing these calculations. Cryptojacking is when threat actors use stolen cloud resources to avoid paying for the necessary servers and power, the cost of which typically outweighs the profits. Who Are Cryptojackers Going after?
The False Promises of Machine Learning in Security
Originally published by Dark Reading and Sysdig. Written by Anna Belak, Sysdig. Contrary to what you might have read on the Internet, machine learning (ML) is not magic pixie dust. It’s a broad collection of statistical techniques that allows us to train a computer to estimate an answer to a question even when we haven’t explicitly coded the correct answer into the program.
Will the Cloud Kill Security Agents?
This blog was originally published by Sysdig here. Written by Anna Belak, Sysdig. The “agents or no agents” debate is ancient and eternal. Every decade or so, we go through another round of “agents are terrible, let’s end them” and “we need more visibility and control to secure the system, maybe we’ll call it a ‘sensor’ this time.” We ultimately always land on the same conclusion. There are no silver bullets.
Shift Left is Only Part of Secure Software Delivery
This blog was originally published by Sysdig here. Written by Anna Belak, Sysdig and Effi Goldstein, Snyk. We’re living in the age of accelerated consumption and delivery. You can get a seemingly infinite selection of products delivered to your door within two days, for free, from thousands of miles away. You can access an endless variety of services online within mere seconds: Movies, music, games, education and even health care.
Shift-Left Is Only One Piece of the Secure Software Delivery Puzzle : @VMblog
By Anna Belak of Sysdig and Effi Goldstein of Snyk We're living in the age of accelerated consumption and delivery. You can get a seemingly infinite selection of products delivered to your door within 2 days, for free, from thousands of miles away. You can access an endless variety of services online within mere seconds: movies, music, games, education, and even healthcare. These modern marvels are afforded to us by relatively recent advances in software development, delivery, and operation.
Shift Left is Only Part of Secure Software Delivery
We’re living in the age of accelerated consumption and delivery. You can get a seemingly infinite selection of products delivered to your door within two days, for free, from thousands of miles away. You can access an endless variety of services online within mere seconds: Movies, music, games, education and even health care. These modern marvels are afforded to us by relatively recent advances in software development, delivery and operations.
If the cloud is more secure, then why is everything still broken?
Seventy-five percent of running containers have high or critical vulnerabilities, according to our recent study. Worse yet, these flaws have patches available, so they could be (but haven’t been) fixed. Many industry veterans wouldn’t be surprised by statistics like these, but weren’t things supposed to be better in the cloud? Things will be better, and for some people they already are. The most advanced and meticulous teams can reduce the number of running vulnerable containers to 5% or less.
If the Cloud Is More Secure, Then Why Is Everything Still Broken?
Seventy-five percent of running containers have high or critical vulnerabilities, according to our recent study. Worse yet, these flaws have patches available, so they could be (but haven't been) fixed. Many industry veterans wouldn't be surprised by statistics like these, but weren't things supposed to be better in the cloud? Things will be better, and for some people they already are. The most advanced and meticulous teams can reduce the number of running vulnerable containers to 5% or less.
Applying Network-Centric Approaches for Threat Detection and Response
Published: 18 March 2019 ID: G00373460 Analyst(s): Augusto Barros | Anton Chuvakin | Anna Belak Already have a Gartner account? Sign in to view this research document. Forgot username or password? Not a Gartner Client? Want more research like this? Learn the benefits of becoming a Gartner client. contact us online Summary The escalating sophistication of threats requires organizations to use multiple sources of data for threat detection and response.
Solution Path for Implementing Threat Detection and Incident Response
Published: 07 January 2019 ID: G00366328 Analyst(s): Anna Belak | Anton Chuvakin | Augusto Barros Already have a Gartner account? Sign in to view this research document. Forgot username or password? Not a Gartner Client? Want more research like this? Learn the benefits of becoming a Gartner client. contact us online Summary Increased complexity and frequency of attacks, along with historical overreliance on preventative controls, elevate the need for detection and incident response capabilities.
Designing and Operating DevOps Workflows to Deploy Containerized Applications
Want more research like this? Learn the benefits of becoming a Gartner client. Running containers in production requires automation and management of manifest files, repositories and infrastructure. To help technical professionals in I&O harness the agility benefits of DevOps, this research offers best practices for building and operating deployment pipelines with Docker.
How to Select a Storage Approach for Persistent Containers
Want more research like this? Learn the benefits of becoming a Gartner client. Data persistence has posed challenges for Docker containers from their inception. Today, a multitude of storage solutions offer support for stateful workloads in containers. This guidance framework will help technical professionals select the appropriate approach for their use cases.
Effect of disorder on the dilute equilibrium vacancy concentrations of multicomponent crystalline solids
Short-range order around a vacancy and Al in the hcp Ti-Al system. Images (a) and (b) illustrate the collection of nearest neighbors 1–8 around a vacancy and aluminum, respectively, in hcp. The size of the balls correspond to the strength of the Va-Al and Al-Al interaction (absolute value) in pure titanium.
Achieving Storage Persistence With Docker Containers
Want more research like this? Learn the benefits of becoming a Gartner client. Containers are ephemeral, but many applications need storage persistence for stateful workloads. This analysis will address how persistent data is handled by I&O teams in a data center infrastructure that supports containers, especially while enabling mobility between hosts.
In-Depth Assessment of EMC XtremIO 4.0
Want more research like this? Learn the benefits of becoming a Gartner client. The XtremIO product is a solid-state array (SSA) offered by EMC, the market share leader in the SSA segment. This assessment scores the XtremIO storage product against Gartner's 157-point technical evaluation criteria for solid-state storage arrays.
Preparing for Containers in the Windows World
Want more research like this? Learn the benefits of becoming a Gartner client. Docker's success has created a lot of buzz around containers on Linux, but until recently, Microsoft Windows applications could not be containerized. This analysis will help technical professionals prepare for Windows container initiatives.
Container Services in the Public Cloud
Want more research like this? Learn the benefits of becoming a Gartner client. Building a container stack from the ground up is not for everyone. Many public cloud providers offer managed container services, also known as "CaaS," to simplify the deployment of Docker containers. This assessment aids technical professionals in evaluating Amazon, Microsoft and Google offerings.
Assessing Monitoring Tools for a Container-Ready Infrastructure
Want more research like this? Learn the benefits of becoming a Gartner client. Docker containers stress the infrastructure differently than virtual and bare-metal servers. Today's monitoring tools are unable to provide sufficient visibility to be effective for containers. This assessment provides approaches to help technical professionals capture and process relevant metrics.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Anna
Contact Anna, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack