Slashdot Mirror


Inside the Private Event Where Microsoft, Google, Salesforce and Other Rivals Share Security Secrets (geekwire.com)

News outlet GeekWire takes us inside Building 99 at Microsoft, where security professionals of the software giant, along with those of Amazon, Google, Netflix, Salesforce, Facebook (and others), companies that fiercely compete with one another, gathered earlier this week to share their learnings for the greater good. From the story: As the afternoon session ended, the organizer from Microsoft, security data wrangler Ram Shankar Siva Kumar, complimented panelist Erik Bloch, the Salesforce security products and program management director, for "really channeling the Ohana spirit," referencing the Hawaiian word for "family," which Salesforce uses to describe its internal culture of looking out for one another. It was almost enough to make a person forget the bitter rivalry between Microsoft and Salesforce. Siva Kumar then gave attendees advice on finding the location of the closing reception. "You can Bing it, Google it, whatever it is," he said, as the audience laughed at the rare concession to Microsoft's longtime competitor.

It was no ordinary gathering at Microsoft, but then again, it's no ordinary time in tech. The Security Data Science Colloquium brought the competitors together to focus on one of the biggest challenges and opportunities in the industry. Machine learning, one of the key ingredients of artificial intelligence, is giving the companies new superpowers to identify and guard against malicious attacks on their increasingly cloud-oriented products and services. The problem is that hackers are using many of the same techniques to take those attacks to a new level. "The challenge is that security is a very asymmetric game," said Dawn Song, a UC Berkeley computer science and engineering professor who attended the event. "Defenders have to defend across the board, and attackers only need to find one hole. So in general, it's easier for attackers to leverage these new techniques." That helps to explain why the competitors are teaming up.
In a statement, Erik Bloch, Director Security PM at Salesforce, said, "This is what the infosec and security industry needs more of. Our customers are shared, and so is our responsibility to protect them.

13 of 48 comments (clear)

  1. Kinda like inside the ... by CaptainDork · · Score: 1

    Sara Huckabee secret staff meetings and stuff.

    --
    It little behooves the best of us to comment on the rest of us.
    1. Re:Kinda like inside the ... by CaptainDork · · Score: 1

      And the fucking news at 11 is a reveal of the whole goddam secret meeting.

      --
      It little behooves the best of us to comment on the rest of us.
  2. Completely Normal for Engineers to talk by aberglas · · Score: 1

    I work on some standards bodies where engineers from competing companies are generally pretty good at reaching consensus. (As long as their product managers are not there.) Remember too, that these people move between companies. So I a sure it was very friendly.

  3. Re:Registered /.ers opinions of the Win64 model by 110010001000 · · Score: 1

    I can vouch that APK Hosts File Engine is a fine piece of software. I use it daily.

  4. Nobody from the NSA? by Snotnose · · Score: 1

    Go home amateurs, the pros can not only clean your clock, they can make it look as dirty as they want.

    1. Re: Nobody from the NSA? by AHuxley · · Score: 1

      Yet PRISM worked for years and nothing was detected, said by the super smart people in the prestigious companies.
      They did not notice the data moving out all day, every day?
      They got told it was FBI? DEA? and all ok?
      They did not notice the NSA deep in their networks and the junk crypto their brand was giving away/selling?

      --
      Domestic spying is now "Benign Information Gathering"
    2. Re: Nobody from the NSA? by phantomfive · · Score: 2

      Youâ(TM)re drastically overestimating the NSAâ(TM)s talent/capabilities. I work in InfoSec,

      Who else has destroyed their target's hardware across an air-gapped divide? EternalBlue shows that the NSA has a lot of hacking skill at their command. They also have the ability to gain physical access if they really need to.

      --
      "First they came for the slanderers and i said nothing."
  5. PRISM by AHuxley · · Score: 1

    got an update thats going to stay a US secret.

    --
    Domestic spying is now "Benign Information Gathering"
  6. any other buzzwords by phantomfive · · Score: 1

    Machine learning, one of the key ingredients of artificial intelligence, is giving the companies new superpowers to identify and guard against malicious attacks on their increasingly cloud-oriented products and services.

    And was their results-oriented work flow kept track of with block-chain?

    --
    "First they came for the slanderers and i said nothing."
  7. Collaboration by messymerry · · Score: 1

    This sort of collaboration between the giants of technology is really really scary. 'Security' is the 'most favoured' excuse to strip people of their freedoms. If these technology giants are collaborating on 'strong AI', and using security as an excuse, then we are all in a world of hurt. Does anybody have any sense of this possibility that these companies are collaborating on strong AI?

    --
    Dear Microlimp: I give you 2 valid product keys for win7 and you reject both of them. Piss off you wankers!!!
  8. Re:Did anyone else immediately think: by AHuxley · · Score: 1

    The PRISM generation.
    Could not stop it.
    Could not find it.
    Did not secure their brands.
    Passed all that junk US crypto math as strong and fully tested.

    --
    Domestic spying is now "Benign Information Gathering"
  9. The biggest challenges in security? by najajomo · · Score: 1

    "The Security Data Science Colloquium brought the competitors together to focus on one of the biggest challenges", that being Microsoft Windows running on Intel hardware and the dangers of running your computing infrastructure on a monoculture.

  10. Re:Isn't this what US-CERT is for? by najajomo · · Score: 1

    @Anonymous Coward": And without that anti-trust concern that a private meeting between rivals has."

    It's just a public relations exercise :]