Joshua Padman
Joshua Padman is a Senior Principal Security Analyst working in Red Hat's Information Security Incident Response team. He has spent a total of eight years at Red Hat, prior to his current role he was in the Product Security team. Joshua has a strong interest in the challenges faced by companies working in open source. More importantly, Joshua is a long term BSides Canberra volunteer and attendee.
Session
This case study delves into the lessons learned from Red Hat's efforts to detect, mitigate, and prevent data leaks not only on GitHub but also across a myriad of distributed sources. It all began with an internal monitoring solution, which subsequently evolved into a comprehensive architecture designed to tackle leaks at scale. The project has proven instrumental in saving considerable time and effort for our Incident Response analysts, significantly compressing the time frame from data exposure to its successful mitigation. Furthermore, it has given rise to new tools aimed at preventing the initial exposure of sensitive data. Presently, our capability to detect leaks has reached a level where we often outpace the bad guys and are preemptively averting potentially expensive incidents all together. We invite you to join us for an overview of the architecture and a preview of our open-source releases to learn how you can do it too!