Securing Remote MCP Servers скачать в хорошем качестве

Securing Remote MCP Servers

Speaker: Jake Berkowsky Jake is a Principal Architect heading Snowflake's Cybersecurity Data Cloud. At Snowflake, Jake's mission is to evangelize and enable the implementation of modern security analytics and engineering. Prior to joining Snowflake, Jake has had a diverse background of technical and leadership roles having most recently served as Co-Founder and CTO of a Cloud Consulting and Data Intelligence company. He regularly maintains his experience and interests in the areas of cloud, devops and development and is an active outdoorsman and nature enthusiast. Talk: Once again what's old is new. Its looking like MCP is gonna be here for awhile so its only a matter of time before an enabled developer asks for sign off on something that works great on their local. This lightning talk is geared to provide cloud security professionals with an up to date understanding of best (or least bad) practices. We’ll cover: Layers of uncertainty: With a spec in active development and not even a transport layer fully agreed upon, how do you approach deploying something before the recommended architectures are even decided on? Trends: What are other folks doing? Is OAuth actually feasible? What else has been done? How are people working around limitations and what are the risks? What is SSE, why is it deprecated but still implemented everywhere and what do I do when they tell me it "needs websockets"? Documented paths forward: What is the community doing? What standards have been released to help align? What tools and frameworks exist to make our jobs easier? What could go wrong? A dive into cloud specific threat vectors, covering the theoretical and maybe even real world incidents