Anton’s Security Blog Quarterly Q3 2021

Sometimes great old blog posts are hard to find (especially on Medium), so I decided to do a periodic list blog with my favorite posts over the past quarter.

Here is the next one. The posts below are ranked by lifetime views. This covers both Anton on Security and my posts from Google Cloud blog, and now our Cloud Security Podcast too!

Top 5 most popular posts of all times:

1. “Security Correlation Then and Now: A Sad Truth About SIEM”
2. “Can We Have “Detection as Code”?”
3. “New Paper: “Future of the SOC: SOC People — Skills, Not Tiers”
4. “Beware: Clown-grade SOCs Still Abound””
5. “New Paper: “Future of the SOC: Forces shaping modern security operations””

Top 5 posts with the most Medium fans:

1. “Security Correlation Then and Now: A Sad Truth About SIEM”
2. “Beware: Clown-grade SOCs Still Abound”
3. “Can We Have “Detection as Code”?”
4. “Why Is Threat Detection Hard?”
5. “A SOC Tried To Detect Threats in the Cloud … You Won’t Believe What Happened Next”

Top 5 Cloud Security Podcast by Google episodes:

1. Episode 1“Confidentially Speaking”
2. Episode 17 “Modern Threat Detection at Google”
3. Episode 8 “Zero Trust: Fast Forward from 2010 to 2021”
4. Episode 2 “Data Security in the Cloud”
5. Episode 27 “The Mysteries of Detection Engineering: Revealed!”

Now, posts by topic.

Security operations / detection & response:

• “Security Correlation Then and Now: A Sad Truth About SIEM”
• “Can We Have “Detection as Code”?”
• “New Paper: “Future of the SOC: SOC People — Skills, Not Tiers””
• “Beware: Clown-grade SOCs Still Abound”
• “Revisiting the Visibility Triad for 2020”
• “Why is Threat Detection Hard?”
• “Top 10 SIEM Log Sources in Real Life?”
• “A SOC Tried To Detect Threats in the Cloud … You Won’t Believe What Happened Next”
• “Today, You Really Want a SaaS SIEM!”

Data security:

• “New whitepaper: Designing and deploying a data security strategy with Google Cloud” [GCP Blog]
• “The cloud trust paradox: To trust cloud computing more, you need the ability to trust it less” [GCP Blog]
• “The cloud trust paradox: 3 scenarios where keeping encryption keys off the cloud may be necessary” [GCP Blog]
• “Data Security and Threat Models”
• “Lost in translation: encryption, key management, and real security” [GCP Blog]
• “Musings on Modern Data Security”
• “Improving security, compliance, and governance with cloud-based DLP data discovery” [GCP Blog]
• “Transform data to secure it: Use Cloud DLP” [GCP Blog]
• “Not just compliance: reimagining DLP for today’s cloud-centric world” [GCP Blog]

Cloud security:

• “Not the Final Answer on NDR in the Cloud …”
• “Move to Cloud: A Chance to Finally Transform Security?”
• “Cloud Migration Security Woes”
• “Is Your Fate In the Cloud?”

Random recommended resource: our new paper on 10X SOC is here: “New Paper: “Autonomic Security Operations — 10X Transformation of the Security Operations Center””

Enjoy!

Previous posts in this series:

• Anton’s Security Blog Quarterly Q2 2021
• Anton’s Security Blog Quarterly Q1 2021
• Anton’s Security Blog Quarterly Q3.5 2020

---

Anton’s Security Blog Quarterly Q3 2021 was originally published in Anton on Security on Medium, where people are continuing the conversation by highlighting and responding to this story.

*** This is a Security Bloggers Network syndicated blog from Stories by Anton Chuvakin on Medium authored by Anton Chuvakin. Read the original post at: https://medium.com/anton-on-security/antons-security-blog-quarterly-q3-2021-3259ff665b91?source=rss-11065c9e943e------2