StarZero All shows Try the podcast clipper →

Jan 2, 2019 · 19m · a16z

a16z Podcast | Securing Infrastructure and Enterprise Services

Brad Peterson · 7m spoken Ben Horowitz · 4m spoken Dominic Schein · 4m spoken Frederick Karest · 2m spoken
0:00 / 0:00
▶ Watch on YouTube →

gold bands on the timeline = statements, start to end. Hover to read, click to jump. CC turns on captions

In this live episode of the a16z podcast recorded at the a16z Summit, moderator Ben Horowitz leads a discussion with enterprise leaders Dominic Schein (News Corp), Brad Peterson (NASDAQ), and Frederick Karest (Okta) on securing mobile platforms, cloud infrastructure, IoT threats, and third-party vendor risks.

How this conversation actually went

Every chapter scored 0–10 on four independent dynamics. Hover any point for the reasoning behind the score. How this is scored →

The host as informed peer 4.5 Guest teaching 4.2 Guest disagreement 0.8 The host pushing back 1.3
05100:0010:000:27–6:40 · The host as informed peer 6/10 Media Mobility and Security at News Corp Ben demonstrates strong domain knowledge regarding blockchain order handling and high-frequency trading latency risks. Brad Peterson provides detailed historical context on centralized depositories and risk engineering in stock exchange architecture.6:40–9:29 · The host as informed peer 4/10 Enterprise Mobile Platform Strategy Ben frames the structural challenge of enterprise mobile adoption and expanded attack surfaces. Dominic and Freddie explain unified API deployment platforms and device OS security capabilities.9:29–13:20 · The host as informed peer 7/10 Financial Transaction Security on Mobile and Cloud Ben demonstrates technical depth by citing a specific hardware supply-chain exploit in Chinese DVR chips that caused a DNS infrastructure DDoS attack. Freddie expands on IoT vulnerabilities across consumer and utility infrastructure.13:20–16:45 · The host as informed peer 6/10 Vendor Risk Management and Critical Infrastructure Defense Ben pushes on vendor reliance and exchange network entry points. Brad explains critical infrastructure intelligence sharing while clarifying how access models have evolved since the early web.16:45–19:10 · The host as informed peer 4/10 Q&A: Vendor Consolidation, Spending, and Behavioral Analysis Ben directs Q&A questions regarding vendor consolidation and spending reallocation. Dominic outlines red team testing while Brad details insider threat behavioral monitoring.19:10–19:21 · The host as informed peer 0/10 Panel Conclusion and Remarks Ben thanks the panelists and concludes the session with standard closing remarks.0:27–6:40 · Guest teaching 6/10 Media Mobility and Security at News Corp Ben demonstrates strong domain knowledge regarding blockchain order handling and high-frequency trading latency risks. Brad Peterson provides detailed historical context on centralized depositories and risk engineering in stock exchange architecture.6:40–9:29 · Guest teaching 4/10 Enterprise Mobile Platform Strategy Ben frames the structural challenge of enterprise mobile adoption and expanded attack surfaces. Dominic and Freddie explain unified API deployment platforms and device OS security capabilities.9:29–13:20 · Guest teaching 5/10 Financial Transaction Security on Mobile and Cloud Ben demonstrates technical depth by citing a specific hardware supply-chain exploit in Chinese DVR chips that caused a DNS infrastructure DDoS attack. Freddie expands on IoT vulnerabilities across consumer and utility infrastructure.13:20–16:45 · Guest teaching 5/10 Vendor Risk Management and Critical Infrastructure Defense Ben pushes on vendor reliance and exchange network entry points. Brad explains critical infrastructure intelligence sharing while clarifying how access models have evolved since the early web.16:45–19:10 · Guest teaching 5/10 Q&A: Vendor Consolidation, Spending, and Behavioral Analysis Ben directs Q&A questions regarding vendor consolidation and spending reallocation. Dominic outlines red team testing while Brad details insider threat behavioral monitoring.19:10–19:21 · Guest teaching 0/10 Panel Conclusion and Remarks Ben thanks the panelists and concludes the session with standard closing remarks.0:27–6:40 · Guest disagreement 1/10 Media Mobility and Security at News Corp Ben demonstrates strong domain knowledge regarding blockchain order handling and high-frequency trading latency risks. Brad Peterson provides detailed historical context on centralized depositories and risk engineering in stock exchange architecture.6:40–9:29 · Guest disagreement 1/10 Enterprise Mobile Platform Strategy Ben frames the structural challenge of enterprise mobile adoption and expanded attack surfaces. Dominic and Freddie explain unified API deployment platforms and device OS security capabilities.9:29–13:20 · Guest disagreement 1/10 Financial Transaction Security on Mobile and Cloud Ben demonstrates technical depth by citing a specific hardware supply-chain exploit in Chinese DVR chips that caused a DNS infrastructure DDoS attack. Freddie expands on IoT vulnerabilities across consumer and utility infrastructure.13:20–16:45 · Guest disagreement 2/10 Vendor Risk Management and Critical Infrastructure Defense Ben pushes on vendor reliance and exchange network entry points. Brad explains critical infrastructure intelligence sharing while clarifying how access models have evolved since the early web.16:45–19:10 · Guest disagreement 0/10 Q&A: Vendor Consolidation, Spending, and Behavioral Analysis Ben directs Q&A questions regarding vendor consolidation and spending reallocation. Dominic outlines red team testing while Brad details insider threat behavioral monitoring.19:10–19:21 · Guest disagreement 0/10 Panel Conclusion and Remarks Ben thanks the panelists and concludes the session with standard closing remarks.0:27–6:40 · The host pushing back 2/10 Media Mobility and Security at News Corp Ben demonstrates strong domain knowledge regarding blockchain order handling and high-frequency trading latency risks. Brad Peterson provides detailed historical context on centralized depositories and risk engineering in stock exchange architecture.6:40–9:29 · The host pushing back 1/10 Enterprise Mobile Platform Strategy Ben frames the structural challenge of enterprise mobile adoption and expanded attack surfaces. Dominic and Freddie explain unified API deployment platforms and device OS security capabilities.9:29–13:20 · The host pushing back 2/10 Financial Transaction Security on Mobile and Cloud Ben demonstrates technical depth by citing a specific hardware supply-chain exploit in Chinese DVR chips that caused a DNS infrastructure DDoS attack. Freddie expands on IoT vulnerabilities across consumer and utility infrastructure.13:20–16:45 · The host pushing back 3/10 Vendor Risk Management and Critical Infrastructure Defense Ben pushes on vendor reliance and exchange network entry points. Brad explains critical infrastructure intelligence sharing while clarifying how access models have evolved since the early web.16:45–19:10 · The host pushing back 0/10 Q&A: Vendor Consolidation, Spending, and Behavioral Analysis Ben directs Q&A questions regarding vendor consolidation and spending reallocation. Dominic outlines red team testing while Brad details insider threat behavioral monitoring.19:10–19:21 · The host pushing back 0/10 Panel Conclusion and Remarks Ben thanks the panelists and concludes the session with standard closing remarks.

speaking balance: gold is the host, purple is the guest (3 minute bins)

0:00 · the host 0% · guest 100%0:00 · the host 0% · guest 100%3:00 · the host 0% · guest 100%3:00 · the host 0% · guest 100%6:00 · the host 0% · guest 100%6:00 · the host 0% · guest 100%9:00 · the host 0% · guest 100%9:00 · the host 0% · guest 100%12:00 · the host 0% · guest 100%12:00 · the host 0% · guest 100%15:00 · the host 0% · guest 100%15:00 · the host 0% · guest 100%18:00 · the host 0% · guest 100%18:00 · the host 0% · guest 100%
Sharpest disagreement ▶ 2:44 Reframing exchange disintermediation

Brad Peterson counters Ben's proposition that blockchain will replace exchanges like NASDAQ, reframing the exchange's role around issuer listings and re-engineering middle-layer record keeping.

 Hardest push from the host ▶ 15:11 Challenging exchange air-gapping

Ben Horowitz refuses Brad Peterson's premise that permissioned financial networks are shielded from internet threats, pointing out that external applications must still enter indirectly.

 Biggest teaching moment ▶ 3:44 History of distributed exchange architecture

Brad Peterson educates the panel on how 1970s mainframe limits forced stock exchanges into centralized depositories, and how blockchain modernizes that original vision.

 The host holds their own ▶ 10:45 Citing supply-chain hardware vulnerabilities

Ben Horowitz showcases deep technical expertise by explaining a precise hardware exploit where flawed Chinese DVR chips were leveraged for a massive DNS denial-of-service attack.
the scores for every segment, with the reasoning behind each
ChapterTopicThe host as informed peerGuest teachingGuest disagreementThe host pushing backWhy
Media Mobility and Security at News Corp 6612 Ben demonstrates strong domain knowledge regarding blockchain order handling and high-frequency trading latency risks. Brad Peterson provides detailed historical context on centralized depositories and risk engineering in stock exchange architecture.
Enterprise Mobile Platform Strategy 4411 Ben frames the structural challenge of enterprise mobile adoption and expanded attack surfaces. Dominic and Freddie explain unified API deployment platforms and device OS security capabilities.
Financial Transaction Security on Mobile and Cloud 7512 Ben demonstrates technical depth by citing a specific hardware supply-chain exploit in Chinese DVR chips that caused a DNS infrastructure DDoS attack. Freddie expands on IoT vulnerabilities across consumer and utility infrastructure.
Vendor Risk Management and Critical Infrastructure Defense 6523 Ben pushes on vendor reliance and exchange network entry points. Brad explains critical infrastructure intelligence sharing while clarifying how access models have evolved since the early web.
Q&A: Vendor Consolidation, Spending, and Behavioral Analysis 4500 Ben directs Q&A questions regarding vendor consolidation and spending reallocation. Dominic outlines red team testing while Brad details insider threat behavioral monitoring.
Panel Conclusion and Remarks 0000 Ben thanks the panelists and concludes the session with standard closing remarks.

Statements from this episode (11)

Disclosure
News Corp feared DDoS attacks over content alteration during 2016 election
“So I think we're always vigilant to that sort of risk. I think our concerns were more that we might have a repeat of the denial of service attacks of the previous weeks. We might have disruption, but we have a lot of safeguards around protecting those crown je…”
Dominic Schein Jan 2, 2019 ▶ 1:47
Prediction Not checkable as stated
NASDAQ CIO Brad Peterson predicts financial markets will shift to blockchain
“We are going to go more towards a distributed record-keeping system because we can now, and that's what's really exciting about blockchain.”
Brad Peterson Jan 2, 2019 ▶ 4:26
Prediction Not checkable as stated
NASDAQ CIO predicts stock exchanges will move data centers from NJ
“So I would say speed has already been exploited. And now it goes back to, I think, security, fairness, and resiliency are going to be balanced out, so we probably won't end up with massive data centers in New Jersey and Chicago.”
Brad Peterson Jan 2, 2019 ▶ 6:15
Disclosure
News Corp CIO demands excellent mobile experience for enterprise software
“Everything we do now, we would not buy a product for enterprise technology unless it had an excellent mobile app an excellent experience.”
Dominic Schein Jan 2, 2019 ▶ 8:03
Prediction Not checkable as stated
NASDAQ CIO Brad Peterson says storing financial assets in cloud is future
“Eventually, though, you need to connect back into what is likely going to be the future of storing your bits that represent your assets or your money in a cloud.”
Brad Peterson Jan 2, 2019 ▶ 10:16
Assertion Contradicted
NASDAQ CIO notes all financial wealth data sits in proprietary data centers
“Today all of All of our representation for our wealth and our money is sitting in a proprietary data center.”
Brad Peterson Jan 2, 2019 ▶ 10:27
Prediction Not checkable as stated
Frederic Kerrest warns recent IoT attacks are trial runs for larger threats
“The other thing is, this is basically a trial run. I mean, this is in very small form.”
Frederick Karest Jan 2, 2019 ▶ 12:01
Assertion Not checkable as stated
News Corp rapidly switched DNS providers during recent cyber attacks
“So for us, for the things we directly control, we did have a contingency plan. We were able to switch DNS very quickly.”
Dominic Schein Jan 2, 2019 ▶ 13:38
Assertion Not checkable as stated
NASDAQ CIO confirms stock exchange core is not open to internet
“For the exchange itself, it is not open to the internet directly.”
Brad Peterson Jan 2, 2019 ▶ 15:01
Assertion Not checkable as stated
NASDAQ CIO says financial firms get early warnings on state-sponsored cyber retaliation
“So there's fairly frequent warnings about who might be the target, but in general financial services institutions do get early warning about campaigns, and it usually is related to some event that is a reaction to a, you know, a foreign policy action by a grou…”
Brad Peterson Jan 2, 2019 ▶ 15:58
Prediction Not checkable as stated
News Corp CIO Dominic Schein refuses to consolidate security under one vendor
“So I don't see us saying, you know, let's just go with one major vendor because we like their security posture. I think there's a de-risking actually in, in having a broader suite and having options.”
Dominic Schein Jan 2, 2019 ▶ 17:35
Made with StarZero

Turn any episode into a week of clips.

This entire site, over 1,000 episodes transcribed, diarized, checked and made playable, runs on the StarZero media pipeline. Drop in your own episode and the podcast clipper finds the moments worth sharing, cuts them, captions them, and reframes them for every feed.

Try the podcast clipper Learn more