Dmitriy Ayrapetov's guest appearances

Dmitriy Ayrapetov

Bill Murphy's RedZone 10X Podcast

That Tech Show

Brian Mackenzie

Stephen Hicks

Steven Kotler

Naveen Jain

David Cross

Kevin Kelly

Hod Lipson

Chris Coyier

Safi Bahcall

Marshall Goldsmith

Massimo Pigliucci

Rohit Bhargava

Peter Taylor

Alan Turing

Richard Sheridan

OwlTail

Today we’re joined by Dmitry Ayrapetov. This is a really insightful conversation about cyber security. We learn about how hackers exploit a system, and ransomware as a service. There’s a lot of actionable stuff in this episode, and Dmitry is going to throw out to you that you’re going to want to check out.Shodan: https://www.shodan.io/Support the show and Buy us a coffee!Edited by: Simon HoernerProduced by: Samuel Gregory and Chris AddamsTheme Music by: Chris AddamsSponsored by: Jupiter and the GiraffeWebsite: https://thattech.showYouTube: https://www.youtube.com/channel/UC4paazkqrlwtB_WW28w4GsgInstagram: @thattechshow_LinkedIn: linkedin.com/company/thattechshow/Get in touch: hello@thattech.show See acast.com/privacy for privacy and opt-out information.

Today we’re joined by Dmitry Ayrapetov. This is a really insightful conversation about cyber security. We learn about how hackers exploit a system, and ransomware as a service. There’s a lot of actionable stuff in this episode, and Dmitry is going to throw out to you that you’re going to want to check out.Shodan: <a href="https://www.shodan.io/" rel="noopener noreferrer nofollow" target="_blank">https://www.shodan.io/</a>Support the show and <a href="https://www.buymeacoffee.com/thattechshow" rel="noopener noreferrer nofollow" target="_blank">Buy us a coffee</a>!Edited by: Simon HoernerProduced by: Samuel Gregory and Chris AddamsTheme Music by: Chris AddamsSponsored by: <a href="https://jupiterandthegiraffe.com/" rel="noopener noreferrer nofollow" target="_blank">Jupiter and the Giraffe</a>Website: <a href="https://thattech.show/" rel="noopener noreferrer nofollow" target="_blank">https://thattech.show</a>YouTube: <a href="https://www.youtube.com/channel/UC4paazkqrlwtB_WW28w4Gsg" rel="nofollow" target="_blank">https://www.youtube.com/channel/UC4paazkqrlwtB_WW28w4Gsg</a>Instagram: @thattechshow_LinkedIn: <a href="http://linkedin.com/company/thattechshow/" rel="nofollow" target="_blank">linkedin.com/company/thattechshow/</a>Get in touch: hello@thattech.show See <a href="https://acast.com/privacy" rel="noopener noreferrer nofollow" target="_blank">acast.com/privacy</a> for privacy and opt-out information.

Episode 53 -  Actionable Cybersecurity with Dmitriy Ayrapetov

If you enjoy listening to my podcast, please take a minute to leave a review  here! As many of you know, I like to choose podcast topics that are at the forefront in the minds of my audience. I also like to interview leaders who inspire me. When I was looking for a new podcast guest for my show, I asked my CTO at RedZone, James Crifasi, if there was someone he knew in security that he really respected – that stood out for him as a leader in the industry. James recommended Dmitriy Ayrapetov, Executive Director of Product Management at SonicWall. Since RedZone has been a SonicWall partner for many years, I knew Dmitriy, and I knew that he represented most of the network security products that we work with. Luckily, he agreed to come on the show. My conversation with Dmitriy ranges from philosophical to tactical and technical especially with his positions on Machine Learning and AI with security. We discuss a variety of topics including, who are his mentors and what does a product manager do at a high-profile security company like SonicWall? One interesting discussion centered around the thought that, “Humans will always make mistakes – human mistakes are one of the main issues with security. Knowing that we will never fix 100% of the problems of security today, and that we have a massive likelihood of a security breach happening,” – I asked Dmitriy “How can you approach this problem?” Key Points of Interest in This Episode:  How Dmitriy researches and keeps on the pulse of security How his mind works when he is thinking of how his customers will be impacted by security Who are his mentors? What would he focus on if he was a startup founder? How would I want to react if I was a customer?  Are your security vendors as concerned about business continuity as you are? I think you will really appreciate Dmitriy’s philosophy for CIOs and CISOs – in particular, his thoughts on human mistakes. He believes that since human mistakes can’t be prevented, that you must realize the need for continuity of the business and be prepared for them. With this, I want to welcome you to my interview with Dmitriy Ayrapetov. Major Take-Aways From This Episode: In this podcast we discuss cutting edge strategies with security: sandboxing, block until verdict, remediation and roll back.  What does a product manager do at a high-profile security company like SonicWall?  o Find people’s problems and bring these engineered solutions to market  Evolution of Security – Block first, then ask questions later. Staying current with security is imperative with a current approach centered on business continuation. New ways of thinking – Prevention vs. Continuity, continuous operations like auto-rollback functions. Supply Chain Attacks – Next Gen behavior analytics which led us into an industry education on old fashioned heuristics vs. machine learning and AI.  Read Full Transcript Here About Dmitriy Ayrapetov: Dmitriy Ayrapetov has been with SonicWall for over 13 years. He is currently the Executive Director of Product Management at SonicWall, in charge of product security. Prior to this position, Dmitriy held product management and engineering roles at SonicWall and at enKoo Inc., an SSL VPN startup acquired by SonicWall in 2005. As a cybersecurity expert, he speaks at industry conferences including, RSA, Gartner Security Summit, Dell World and is a regular presence at SonicWall’s annual partner conference Peak Performance. Dmitriy holds an MBA from the Haas School of Business at U.C. Berkeley and a BA in Cognitive Science at UC Berkeley. You can see all the SonicWall products Dmitriy has had his hand on since the beginning. • Network Security • Firewalls • FTDMI – Automation and Security • SonicWall ips Series • Client Capture – rollback • Email Security How to get in touch with Dmitriy Ayrapetov  LinkedIn Twitter Facebook  Key Resources + Links Link to Dmitriy’s SonicWall blog page:https://blog.sonicwall.com/authors/dmitriy-ayrapetov/  • Blog, pub. 9/12/2018:  Botnets Targeting Obsolete Software • Blog, pub. 2/13/2017:  Practical Defense for Cyber Attacks + Lessons from 2017 SonicWall Annual Threat Report Other SonicWall blog pages that cover suggested topics of discussion listed above: • Sonic Wall Threat Intelligence blog page: https://blog.sonicwall.com/categories/threat-intelligence/  • Annual and mid-year cyber threat reports: https://brandfolder.com/s/pix4u8-fllsa0-f5587c Other presentations and videos by Dmitriy Ayrapetov:  SonicWall Roadmap and Industry Trends:  https://www.youtube.com/watch?v=p0vAqko1E2s, pub. July 13, 2018 2018 SonicWall Cyber Threat Report – Webcast: https://www.sonicwallsales.com/Video.aspx?code=KJSCK7 RSA Presentation 2017:  The Strategic Advantage of Adaptive Multi-Engine Advanced Threat Protection (this is a pdf file of the slide presentation) Learn How to Detect and Prevent Malicious Files with SonicWall Capture ATP: https://www.youtube.com/watch?v=55tw20crqhk, pub. Sept 1, 2017. Also, published as a webinar through  BrightTALK, Sept 19, 2017 How SonicWall SuperMassive Next-Gen Firewall Series ensures that every byte of every packet coming into and going out of your network is inspected while maintaining high-performance and low latency: https://www.facebook.com/SonicWall/videos/10155323557848859/, pub. Aug 17, 2017  Other resources mentioned in the Podcast, provided by Dmitriy Ayrapetov: There are two people that Dmitriy mentioned as thought leaders in the field: one of them is well known, Bruce Schneier, an internationally renowned security technologist; while the other is less known, Dan Geer, CISO at In-Q-Tel. Bruce provides a lot of industry as well as practical advice on his website: https://www.schneier.com/. Dan’s keynote at Black Hat 2014 was, in my opinion, direction setting. It was one of the highest signal to noise ratio keynotes that I’ve ever heard and I still come back to it from time to time. It’s very dense, and is based on an essay that he authored.  Black Hat Keynote: https://www.youtube.com/watch?v=nT-TGvYOBpI Essay: http://geer.tinho.net/geer.blackhat.6viii14.txt Dan has many other essays/keynotes and your listeners can find them on his website: http://geer.tinho.net/pubs  The book that Dmitriy mentioned early in the podcast is  Hacking Exposed –they’re on the 7th edition now. I’m not “recommending” the book, I just referenced it as something that piqued my curiosity in security early on. This episode is sponsored by the  CIO Scoreboard, a powerful tool that helps you communicate the status of your IT Security program visually in just a few minutes. Credits: * Outro music provided by Ben’s Sound Other Ways To Listen to the Podcast  iTunes | Libsyn | Soundcloud | RSS |  LinkedIn Leave a Review If you enjoyed this episode, then please consider leaving an iTunes review here. Click here for instructions on how to leave an iTunes review if you’re doing this for the first time. About Bill Murphy Bill Murphy is a world renowned IT Security Expert dedicated to your success as an IT business leader. Follow Bill on LinkedIn and Twitter.

If you enjoy listening to my podcast, please take a minute to leave a review <a href="https://itunes.apple.com/us/podcast/bill-murphys-redzone-podcast/id921556938?mt=2" rel="nofollow" target="_blank"> here</a>! As many of you know, I like to choose podcast topics that are at the forefront in the minds of my audience. I also like to interview leaders who inspire me. When I was looking for a new podcast guest for my show, I asked my CTO at RedZone, James Crifasi, if there was someone he knew in security that he really respected – that stood out for him as a leader in the industry. James recommended Dmitriy Ayrapetov, Executive Director of Product Management at SonicWall. Since RedZone has been a SonicWall partner for many years, I knew Dmitriy, and I knew that he represented most of the network security products that we work with. Luckily, he agreed to come on the show. My conversation with Dmitriy ranges from philosophical to tactical and technical especially with his positions on Machine Learning and AI with security. We discuss a variety of topics including, who are his mentors and what does a product manager do at a high-profile security company like SonicWall? One interesting discussion centered around the thought that, “Humans will always make mistakes – human mistakes are one of the main issues with security. Knowing that we will never fix 100% of the problems of security today, and that we have a massive likelihood of a security breach happening,” – I asked Dmitriy “How can you approach this problem?” Key Points of Interest in This Episode: <ul> <li>How Dmitriy researches and keeps on the pulse of security</li> <li>How his mind works when he is thinking of how his customers will be impacted by security</li> <li>Who are his mentors?</li> <li>What would he focus on if he was a startup founder?</li> <li>How would I want to react if I was a customer?</li> </ul> Are your security vendors as concerned about business continuity as you are? I think you will really appreciate Dmitriy’s philosophy for CIOs and CISOs – in particular, his thoughts on human mistakes. He believes that since human mistakes can’t be prevented, that you must realize the need for continuity of the business and be prepared for them. With this, I want to welcome you to my interview with Dmitriy Ayrapetov. Major Take-Aways From This Episode: In this podcast we discuss cutting edge strategies with security: sandboxing, block until verdict, remediation and roll back. <ul> <li>What does a product manager do at a high-profile security company like SonicWall?</li> </ul> o Find people’s problems and bring these engineered solutions to market <ul> <li>Evolution of Security – Block first, then ask questions later.</li> <li>Staying current with security is imperative with a current approach centered on business continuation.</li> <li>New ways of thinking – Prevention vs. Continuity, continuous operations like auto-rollback functions.</li> <li>Supply Chain Attacks – Next Gen behavior analytics which led us into an industry education on old fashioned heuristics vs. machine learning and AI.</li> </ul> <a href="https://www.redzonetech.net/blog/dmitriy_ayrapetov-2/" rel="nofollow" target="_blank">Read Full Transcript Here</a> About Dmitriy Ayrapetov: Dmitriy Ayrapetov has been with SonicWall for over 13 years. He is currently the Executive Director of Product Management at SonicWall, in charge of product security. Prior to this position, Dmitriy held product management and engineering roles at SonicWall and at enKoo Inc., an SSL VPN startup acquired by SonicWall in 2005. As a cybersecurity expert, he speaks at industry conferences including, RSA, Gartner Security Summit, Dell World and is a regular presence at SonicWall’s annual partner conference Peak Performance. Dmitriy holds an MBA from the Haas School of Business at U.C. Berkeley and a BA in Cognitive Science at UC Berkeley. You can see all the SonicWall products Dmitriy has had his hand on since the beginning. • Network Security • Firewalls • FTDMI – Automation and Security • SonicWall ips Series • Client Capture – rollback • Email Security How to get in touch with Dmitriy Ayrapetov <ul> <li><a href="https://www.linkedin.com/in/dmitriy233/" rel="nofollow" target="_blank">LinkedIn</a></li> <li><a href="https://twitter.com/ThreadState" rel="nofollow" target="_blank">Twitter</a></li> <li><a href="https://www.facebook.com/dmitriy.arapov.10" rel="nofollow" target="_blank">Facebook</a></li> </ul> Key Resources + Links Link to Dmitriy’s SonicWall blog page:<a href="https://blog.sonicwall.com/authors/dmitriy-ayrapetov/" rel="nofollow" target="_blank">https://blog.sonicwall.com/authors/dmitriy-ayrapetov/</a> • Blog, pub. 9/12/2018: <a href="https://blog.sonicwall.com/2018/09/botnets-targeting-obsolete-software/" rel="nofollow" target="_blank"> Botnets Targeting Obsolete Software</a> • Blog, pub. 2/13/2017: <a href="https://blog.sonicwall.com/2017/02/lessons-from-2017-sonicwall-annual-threat-report/" rel="nofollow" target="_blank"> Practical Defense for Cyber Attacks + Lessons from 2017 SonicWall Annual Threat Report</a> Other SonicWall blog pages that cover suggested topics of discussion listed above: • Sonic Wall Threat Intelligence blog page: <a href="https://blog.sonicwall.com/categories/threat-intelligence/" rel="nofollow" target="_blank">https://blog.sonicwall.com/categories/threat-intelligence/</a> • Annual and mid-year cyber threat reports: <a href="https://brandfolder.com/s/pix4u8-fllsa0-f5587c" rel="nofollow" target="_blank">https://brandfolder.com/s/pix4u8-fllsa0-f5587c</a> Other presentations and videos by Dmitriy Ayrapetov: <ul> <li>SonicWall Roadmap and Industry Trends: <a href="https://www.youtube.com/watch?v=p0vAqko1E2s,%20pub.%20July%2013,%202018" rel="nofollow" target="_blank"> https://www.youtube.com/watch?v=p0vAqko1E2s, pub. July 13, 2018</a></li> <li>2018 SonicWall Cyber Threat Report – Webcast: <a href="https://www.sonicwallsales.com/Video.aspx?code=KJSCK7" rel="nofollow" target="_blank">https://www.sonicwallsales.com/Video.aspx?code=KJSCK7</a></li> <li>RSA Presentation 2017: <a href="https://published-prd.lanyonevents.com/published/rsaus17/sessionsFiles/4458/SPO2-W03_The-Strategic-Advantage-of-Adaptive-Multi-Engine-Advanced-Threat-Protection.pdf" rel="nofollow" target="_blank"> The Strategic Advantage of Adaptive Multi-Engine Advanced Threat Protection</a> (this is a pdf file of the slide presentation)</li> <li>Learn How to Detect and Prevent Malicious Files with SonicWall Capture ATP: <a href="https://www.youtube.com/watch?v=55tw20crqhk" rel="nofollow" target="_blank">https://www.youtube.com/watch?v=55tw20crqhk</a>, pub. Sept 1, 2017. Also, published as a webinar through <a href="https://www.brighttalk.com/webcast/1745/281119/learn-how-to-detect-and-prevent-malicious-files-with-sonicwall-capture-atp" rel="nofollow" target="_blank"> BrightTALK</a>, Sept 19, 2017</li> <li>How SonicWall SuperMassive Next-Gen Firewall Series ensures that every byte of every packet coming into and going out of your network is inspected while maintaining high-performance and low latency: <a href="https://www.facebook.com/SonicWall/videos/10155323557848859/" rel="nofollow" target="_blank">https://www.facebook.com/SonicWall/videos/10155323557848859/</a>, pub. Aug 17, 2017</li> </ul> Other resources mentioned in the Podcast, provided by Dmitriy Ayrapetov: There are two people that Dmitriy mentioned as thought leaders in the field: one of them is well known, Bruce Schneier, an internationally renowned security technologist; while the other is less known, Dan Geer, CISO at In-Q-Tel. Bruce provides a lot of industry as well as practical advice on his website: <a href="https://www.schneier.com/" rel="nofollow" target="_blank">https://www.schneier.com/</a>. Dan’s keynote at Black Hat 2014 was, in my opinion, direction setting. It was one of the highest signal to noise ratio keynotes that I’ve ever heard and I still come back to it from time to time. It’s very dense, and is based on an essay that he authored. <ul> <li>Black Hat Keynote: <a href="https://www.youtube.com/watch?v=nT-TGvYOBpI" rel="nofollow" target="_blank">https://www.youtube.com/watch?v=nT-TGvYOBpI</a></li> <li>Essay: <a href="http://geer.tinho.net/geer.blackhat.6viii14.txt" rel="nofollow" target="_blank">http://geer.tinho.net/geer.blackhat.6viii14.txt</a></li> <li>Dan has many other essays/keynotes and your listeners can find them on his website: <a href="http://geer.tinho.net/pubs" rel="nofollow" target="_blank">http://geer.tinho.net/pubs</a></li> </ul> The book that Dmitriy mentioned early in the podcast is <a href="https://www.mheducation.com/highered/product/hacking-exposed-7-mcclure-scambray/0071780289.html" rel="nofollow" target="_blank"> Hacking Exposed</a> –they’re on the 7th edition now. I’m not “recommending” the book, I just referenced it as something that piqued my curiosity in security early on. This episode is sponsored by the <a href="http://www.ciosecurityscoreboard.com/?utm_source=RedZonePodcastPost&amp;utm_medium=TextBottom&amp;utm_campaign=Scoreboard" rel="nofollow" target="_blank"> CIO Scoreboard</a>, a powerful tool that helps you communicate the status of your IT Security program visually in just a few minutes. Credits: * Outro music provided by <a href="http://www.bensound.com/" rel="nofollow" target="_blank">Ben’s Sound</a> Other Ways To Listen to the Podcast <a href="https://itunes.apple.com/us/podcast/bill-murphys-redzone-podcast/id921556938?mt=2" rel="nofollow" target="_blank"> iTunes</a> | <a href="http://redzonetech.libsyn.com/" rel="nofollow" target="_blank">Libsyn</a> | <a href="https://soundcloud.com/theredzonepodcast/" rel="nofollow" target="_blank">Soundcloud</a> | <a href="http://redzonetech.libsyn.com/rss" rel="nofollow" target="_blank">RSS</a> | <a href="https://www.linkedin.com/today/author/0_3nPKWocnUwnfG5HYbEgnBb?trk=prof-sm" rel="nofollow" target="_blank"> LinkedIn</a> Leave a Review If you enjoyed this episode, then please consider leaving an iTunes review <a href="https://itunes.apple.com/us/podcast/bill-murphys-redzone-podcast/id921556938?mt=2" rel="nofollow" target="_blank">here</a>. Click <a href="https://www.redzonetech.net/how-to-leave-a-review-on-itunes/" rel="nofollow" target="_blank">here</a> for instructions on how to leave an iTunes review if you’re doing this for the first time. About Bill Murphy Bill Murphy is a world renowned IT Security Expert dedicated to your success as an IT business leader. Follow Bill on <a href="https://www.linkedin.com/in/billmurphynll" rel="nofollow" target="_blank">LinkedIn</a> and <a href="https://twitter.com/exoitleader" rel="nofollow" target="_blank">Twitter</a>.

S8 E2: Block First, Ask Questions Later | Security + Business Continuity with Dmitriy Ayrapetov