Conf T with your SE

"Conf T with your SE" is a trailblazing podcast designed specifically for the tech-savvy listener. Launched in 2019, it brings together thought leaders, experts, and enthusiasts in the world of technology to spark insightful discussions, share industry trends, and tackle complex technical concepts in an accessible and engaging way. Hosted by seasoned systems engineer, Bryan Young, the show breaks down the barriers between the intricate world of computer networking and software and the everyday listener. Bryan's knack for simplifying complex concepts, paired with his infectious enthusiasm for the new and disruptive technology makes the podcast a hit among novices and experts alike. The "Conf T with your SE" podcast dives deep into a wide array of topics, from the nitty-gritty of coding and algorithm design to the larger implications of technology on society. It also covers career guidance, industry trends, the latest research, and interviews with leading figures from tech giants to startup pioneers. Listeners of "Conf T with your SE" not only gain a deeper understanding of the world of Information Technology but also get a chance to be part of a growing community that's passionate about learning, innovating, and pushing the boundaries of what's possible in tech. Yet the dialogue doesn't end with the podcast! We invite listeners to join our growing Discord community at https://discord.gg/shgnswpKzw. Here, you can extend the discussions, engage directly with Bryan and other listeners, and even suggest topics for forthcoming episodes. It's a place for learning, debating, networking, and experiencing the thrill of the ever-evolving tech industry. Whether you're an experienced professional hunting for fresh insights, a student aspiring to carve out a career in the industry, or a tech enthusiast keen to grasp the world of systems engineering, "Conf T with your SE" caters to all. Tune in, participate in the Discord discourse, and be part of this enlightening voyage through the technological landscape!

Ep 65 - Day in the Life of a SOC Analyst 03/04/2024

Ep 65 - Day in the Life of a SOC Analyst Summary This conversation explores the role of a SOC analyst and the challenges they face in the cybersecurity field. It covers the structure and responsibilities of a SOC team, the impact of remote work on communication and collaboration, and the skills required to be a successful SOC analyst. The conversation also delves into the tools and technologies used in a SOC, the career path of a SOC analyst, and the importance of passion and continuous learning in the IT industry. In this conversation, Bryan and Jordan discuss the qualities of a SOC analyst, the challenges and rewards of the job, significant threats and their mitigation, collaboration with other teams, the role of AI in the SOC, future threats such as quantum computing, and advice for aspiring SOC analysts. They also share funny incidents that have occurred in the SOC. Overall, the conversation highlights the importance of continuous learning, effective communication, and a passion for cybersecurity in the SOC role. Takeaways A SOC (Security Operations Center) is responsible for mitigating threats and analyzing network data to identify potential security breaches. Communication and collaboration are crucial skills for SOC analysts, especially in a remote work environment. SOC analysts need to prioritize and manage alerts effectively to differentiate between actual threats and false positives. Key skills for SOC analysts include analytical thinking, programming knowledge, and incident handling. Becoming a SOC analyst typically involves obtaining a degree in cybersecurity and gaining experience through tiered roles within a SOC team. SOC analysts should have a passion for cybersecurity and be coachable and willing to learn. Challenges in the SOC can be mentally taxing, but the job is rewarding when able to identify and mitigate threats. Collaboration with other teams, such as security engineers, is crucial for a cohesive and effective defense. AI can play a role in automating certain aspects of the SOC, such as alerting and response. Future threats, including quantum computing, should be considered and prepared for in the SOC. Aspiring SOC analysts should be open to learning, ask questions, and embrace the challenges of the job. /episode/index/show/conft/id/30220158

Ep 64 - Pen Testing and Remediation 12/06/2023

Ep 64 - Pen Testing and Remediation Show Notes for Episode 64: Penetration Testing and Remediation in Cybersecurity Welcome to Episode 64 of our cybersecurity-focused podcast! In this installment, our host Bryan Young is joined by two experts in the field of cyber defense, Megan Scherer and Ryan Wager from Secure Network Technologies. Dive deep with us as we explore the critical roles that penetration testing and remediation play in safeguarding organizations against digital threats. Main Themes: The Importance of Penetration Testing: Our guests discuss how penetration tests are crucial for identifying weaknesses in a variety of infrastructural setups, from small businesses to large enterprises. Cybersecurity Remediation: Learn about the steps that need to be taken once vulnerabilities are found, and the importance of timely and effective action to protect an organization’s data integrity. Awareness of Cyber Risks: Megan and Ryan stress the need for organizations to be fully aware of the potential risks to their clients, suppliers, and internal operations. They also address the unique challenges faced by organizations without specialized IT teams or a Chief Information Security Officer (CISO). Internal Collaboration: Drawing parallels with the development issues of the Ford Pinto, the discussion turns to the importance of internal collaboration within organizations to prevent and mitigate security risks. Keeping Up with Evolving Threats: The ever-changing landscape of cybersecurity means constant vigilance and updates to security measures are necessary. The episode touches on the possibility of using automation to stay ahead of the game, especially with the emergence of state-sponsored cyber threats. Partnership with Driven: Hear about Secure Network Technologies’ partnership with Driven and how it has helped in pinpointing security vulnerabilities. Call to Action: Listeners are encouraged to visit the podcast’s website for more information and resources, and to share the episode with others who are interested in cybersecurity. Don’t miss this in-depth conversation that could help you better understand and improve your organization’s cyber defenses. Stay safe and stay informed! Remember to subscribe and share Episode 64 with your network. Until next time, keep your data secure and your systems checked! For additional resources and episode transcripts, please visit our website. If you have questions or topics you’d like us to cover in future episodes, reach out to us through our contact page. /episode/index/show/conft/id/28955558

Ep 63 - Quantum Computing 11/22/2023

Ep 62 - Empowering our Veterans in the Digital Age 11/08/2023

Ep 61 - Tales from the De-Crypt 10/31/2023

Ep 60 - Safeguarding Bytes with Fortinet 10/11/2023

Ep 60 - Safeguarding Bytes with Fortinet In this episode of Conf T with your SE, host Bryan Young welcomes special guest Steve Staurovsky from Fortinet. They start by discussing their previous meeting at the CT NUG event and the wide range of products in Fortinet's portfolio. The importance of interoperability and collaboration with other vendors in the industry is highlighted. Steve emphasizes the need for securing operational technology (OT) environments, especially in industrial and healthcare settings, where secure access and data transmission are crucial. The conversation then shifts to the challenges of securing and updating machines in the manufacturing industry that are connected to the network but cannot be easily updated due to their age. The speakers stress the importance of keeping these assets online and the difficulties in finding replacements or compatible hardware. They also discuss the lack of interaction between IT and OT, the vulnerabilities created by preventative maintenance schedules and legacy applications, and the increasing sophistication of ransomware attacks. Fortinet's EDR product is mentioned as a solution for securing legacy devices such as old versions of Windows. The need for legacy asset support is further emphasized through a story about a critical asset running on an outdated system. Fortinet's ability to run on unsupported assets and provide peace of mind is highlighted. The conversation then moves on to Fortinet's FortiLink feature, which enables traffic routing through the firewall, offering advantages in terms of defense in depth strategy and flexibility. The evolution of FortiGate firewall from separate boxes for different functions to a single integrated solution is discussed, along with the variety of hardware sizes, feature sets, and licensing options available. The speakers then delve into the cycle of expansion and contraction in IT, from mainframes and terminals to the current cloud services and multiple clouds. They touch on the increasing need for processing power and how the cloud addresses this demand. The conversation takes a nostalgic turn as they reminisce about gaming, specifically playing Unreal Tournament and attending a LAN party at the Rochester Institute of Technology. Fortinet's free training and certification program, offered during the pandemic, is mentioned, with praise for its high quality and polished production. The importance of using correct terminology in the IT industry is emphasized, along with a personal anecdote about using the correct terms with a doctor. The discussion briefly touches on Chromebooks and the speaker's experience with an original CR-48 Chromebook from Google. The speakers stress the significance of understanding and using the correct terminology in IT and networking, highlighting its impact on communication and professionalism. They also mention the benefits of having knowledge in electrical systems within the IT industry. The conversation veers towards programming and its integration into networking, mentioning the use of Postman and sharing their experiences with programming tasks. They conclude by briefly mentioning upcoming merchandise related to their podcast and recommending checking out Fortinet's training and certification at training.fortinet.com. The features of FortiGates, including the use of custom ASICs for better performance and lower power requirements, are discussed. The issues with the supply chain and its impact on product availability are touched upon, with an overall optimistic outlook for improvement. The cloud management capabilities of Fortinet's products are then explored, with a focus on FortiManager. The speaker explains how FortiManager allows centralized management and logging of devices, making changes and ensuring synchronization across multiple devices easier. The ability to templatize network configurations for scalability and automation is mentioned, along with the advantages of using FortiManager compared to manual device configuration. The availability of an Ansible playbook for automation is highlighted, and the importance of training to fully utilize Fortinet's offerings is emphasized. The diverse portfolio of Fortinet beyond the well-known FortiGate firewall is mentioned, and listeners are encouraged to explore their products. The episode concludes with an invitation to join the CT Network Users Group's Discord channel and to review and share the show. Links Discord: https://discord.conft.show Fortinet Training: https://training.fortinet.com /episode/index/show/conft/id/28289633

Ep 59 - Redefining Storage with Pure Storage 09/27/2023

Ep 59 - Redefining Storage with Pure Storage Show Notes: Episode 59 - Redefining Storage with Pure Storage | Conf T with your SE Overview In this episode of Conf T with your SE, Bryan Young welcomes Chandler Bassett from Pure Storage. Together, they explore the groundbreaking world of affordable SSD storage and discuss the history and evolution of Pure Storage. Tune in to learn about the company's innovative solutions to Flash reliability concerns, its execution pipeline, and its advanced technology for enhancing storage performance and efficiency. Topics Covered Introduction to Pure Storage, a pioneer in redefining the storage array industry. Insight into Pure Storage's software-driven approach and its impact on Flash reliability. Pure Storage's execution pipeline and commitment to projections. Introduction to Purity, Pure Storage's technology for managing wear leveling and cell health degradation. Discussion on different features of Pure Storage arrays depending on the product family. Analysis of the shift from traditional hard drives to SSDs and its implications. In-Depth Conversations Examination of NAND flash storage, Pure arrays, Pure One, and SSDs. Addressing concerns regarding supply chain disruptions due to factory fires and natural disasters. Understanding the long-term benefits and future-proofing of investing in advanced storage solutions. Exploring the Evergreen concept as a foundational model for Pure Storage. Pure Storage Products Flash Arrays for legacy workloads, offering various data services and feature sets. FlashBlade, originally built for analytics, now used primarily for data protection. Portworx, a tool that simplifies microservices or Kubernetes-based architecture. Collaboration with Cohesity to enhance data protection software. Concluding Thoughts Reiteration of the importance of Evergreen and its role in keeping Pure's fleet modern. Discussion on the environmental benefits and efficiencies of using Pure's technologies. Chandler’s passion for Pure's product and platform, and his commitment to helping customers. Invitation for listeners to join the discussion on Discord and to explore Pure's innovative solutions. Connect with Us Join the conversation on . Reach out to Bryan Young for more insights. Discover more about Pure Storage with Chandler Bassett. Don't miss out on this in-depth exploration of Pure Storage and the redefinition of storage solutions in the modern age. Tune in now! /episode/index/show/conft/id/28154738

Ep 58 - Demystifying NaaS with Nile Secure 09/13/2023

Ep 58 - Demystifying NaaS with Nile Secure **Show Notes:** In this episode, Bryan sits down with experts Austin Hawthorne and Michael Kowal from Nile to unpack the intriguing topic of networking as a service. Dive into the discussions that span from defining the technology to its market implications and challenges. **Topics Covered:** - Introduction to Networking as a Service: - Defined as tech always ready for business needs without complexities and costs. - Other definitions including broadband, outsourcing IT, and managed services. - Market Expectations: - Influence of cloud adoption disrupting the market. - Need for alignment of spend based on business performance. - Challenges: - For incumbent vendors to adjust due to tech debt, customer, and market demands. - Complexity of delivering network as-a-service compared to other as-a-service offerings. - Speed Benefits: - Frequent software upgrades, faster fixes, and reduced failure radius. - Network Deployment: - Standardizing approaches for predictive outcomes. - Secure networking involving zero trust and RADIUS. - Automation & Configuration: - Addressing underlying complexities before introducing automation. - Reducing bugs through streamlined testing and the concept of a digital twin. - Vendor Challenges: - Existing codebase sizes, feature support, and delay in fixes and new features. - Documenting profiles for new QS features and identifying bug dependencies. - Security Aspects: - Approaches to network edge security. - Challenges between security and network teams. - The trade-off between risk, complexity, and cybersecurity insurance. - Zero-Trust Principles: - Challenges with implementing dynamic ACLs, roles, and more. - Importance of encryption, authorization, and enforcement. - Limitations of traditional networking setups using VLANs. - Firewalls: - Machine-to-machine traffic and security benefits. - Local switching and RADIUS and DHCP server roles. - Network Access Control (NAC): - Definition and implementations. - SSO as a form of NAC and Zero Trust constructs for the network layer. - Nile Network: - Payment models and Proof of Value (POV) offerings. - Network Implementation & Automation: - Benefits of automation over manual approaches. - Introduction of soft bots and Nile service block. - Closing Notes: - Visit the show's website, rate, and review the episodes, and reach out with questions, comments, or suggestions. --- **Links:** - Nile Secure - www.nilesecure.com - Join the Discord - discord.conft.show - Driven - www.driven.tech Thanks for tuning in to Conf T with your SE! If you found this episode informative and entertaining, please consider rating and reviewing our show on your favorite podcast platforms. Your support helps spread the word! /episode/index/show/conft/id/28018188

Ep 57 - The Next Chapter 07/28/2023

Ep 56 - Cisco Live '23 Recap 07/12/2023

Ep 55 - E-mail Threat Defense 06/28/2023

Ep 54 - XDR Deep Dive 06/15/2023

Ep 53 - DDoS Deep Dive 05/31/2023

Ep 52 - AI, Ethics and Cybersecurity 05/17/2023

Ep 52 - AI, Ethics and Cybersecurity In this thought-provoking episode of Conf T, hosts Bryan Young and Tom Porto sit down with Joe Marshall, also known as Rooster Cogburn. Joe, a Senior Security Strategist with Talos, brings his expertise in artificial intelligence and machine learning to the table. AI vs ML: We kick off the episode by addressing a common confusion - what is the difference between Artificial Intelligence (AI) and Machine Learning (ML)? Thanks to an enlightening explanation from ChatGPT, we now know that AI is the broader concept of machines being able to carry out tasks in a way we would consider 'smart', while ML is a specific subset of AI that involves the idea of training machines on data to learn and make decisions. AI Confidence and Source Citation: A deep dive into the issues surrounding AI's confidence and its lack of source citation. We discuss why it's so important for AI to cite its sources and how it can be improved. Ethical Guardrails in AI: Joe gives an insightful perspective on the ethical guardrails in place for AI and how they can potentially be circumvented, sparking a thoughtful debate on the ethical use of this technology. AI Sentience: Is AI sentient? This question sparks a fascinating discussion about the nature of sentience and how it applies, or doesn't apply, to AI. AI and the Dark Web: We explore the sinister side of AI with a look at its use on the Dark Web. How is AI being leveraged by those operating outside the law, and what can be done about it? AI for Phishing and Other Nefarious Tasks: We delve into the concerning issue of AI being used for phishing and other malicious activities. What are the implications, and how can we defend against it? AI Pranks: On a lighter note, we discuss some of the more amusing uses of AI, sharing anecdotes about pranks and other humorous applications and even pulling one live on the show on Mr. Porto. Combating AI-Driven Cybersecurity Threats: Joe gives his expert advice on how to go on the offensive against AI-driven cybersecurity threats. Using Failure to Determine Personhood: An intriguing concept is presented - using failure as a way to determine whether an entity is a real person or AI. Future of AI: Finally, we contemplate the future of AI, now that the barrier to entry has been drastically lowered. What's next on the horizon for this rapidly evolving technology? Tune in to gain some valuable insights into these topics and much more. Whether you're a tech enthusiast or a professional in the field, this is an episode you won't want to miss. /episode/index/show/conft/id/26863014