Back
David Aviv
CTO, Radware

Delivering Security at the Edge with Radware

🎥 Feb 28, 2023 📺 TechArena ⏱ 14m 👁 5 views
TechArena host Allyson Klein chats with Radware CTO David Aviv about the unique challenges of securing the edge and how his company is shaping security solutions to minimize attack threats.
Watch on YouTube

About David Aviv

At RSAC 2025, Aviv stated that the democratization of AI is "changing dramatically not only the security posture but our lifestyle" and argued that human abilities will not keep up with AI abilities. He described seeing "agentic AI bots" that forward JavaScript anti-bot challenges to large language models, which quickly solve them and allow attackers to bypass protections. Aviv said Radware uses AI to build deeper security controls and to protect AI infrastructure, noting that running AI applications creates a new AI supply chain and new threat surfaces. In earlier appearances, Aviv discussed the shift to edge-centric architectures driven by 5G, stating that security must be pushed to the edge and that the 5G core, built on HTTP/web-based protocols, opens networks to web-based attacks. He noted that account takeover has gained momentum via spear-phishing, allowing attackers to assume identities and install stealth agents in cloud environments. Aviv also described Radware's approach to self-learning security algorithms, stating that in one week their devices produced about 130,000 attack events and roughly 99.9% of mitigations were performed automatically.

Source: AI-verified profile updated from David Aviv's recent appearances. Browse all interviews →

Transcript (24 segments)
A
Allison Klein0:10
Welcome to the Tech Arena, featuring authentic discussions between tech's leading innovators and our host, Allison Klein. Now let's step into the arena.
Welcome to the Tech Arena. My name is Allison Klein, and today I'm coming live from the World Congress with David Aviv, CTO of Radware. Welcome to the program.
D
David Aviv0:35
Thank you for having me.
A
Allison Klein0:38
It's a pleasure. Thank you for taking some time out of your busy schedule at MWC to be with us. Why don't we just start with an introduction of Radware and your role at the company?
D
David Aviv0:46
Hi. Radware is a global leader in security solutions, network protection solutions, as well as application security, covering network protection, data center protection.
A
Allison Klein1:07
I've been doing a number of interviews about the proliferation of the edge and the edge of the network, including a number of interviews at MWC, and I was really interested in talking to Radware about how to secure all of this data. I want to start with a question on how do you view the edge, and where do you see the most adoption of edge computing today?
D
David Aviv1:31
Well, it's an excellent question because edge becomes a very amorphous term. I mean, depending on everyone's definition of what it actually is. So classically, everyone talks about the edge with cloud, it's computer network edge. Edge is becoming everything. The reason is very simple because everything is disaggregated, distributed. So edge becomes the point of presence where you locate either network resources, data resources, storage resources, compute resources, you name it. I would say that currently, especially now in Barcelona, the 5G edge compute or mobile edge compute is definitely one of the best places, especially for mobile applications. However, we need to understand that when we talk of edge, in order to run applications effectively, the application needs to be built for the edge. It's mainly the backend, the third one where you store the critical data, the state, sensitive data. So there are a lot of trade-offs. Let's say mobile, the car industry, the next generation mobile cars, also called moving, need to engineer the applications that are running into robotics. They need to be built to run on the edge. It's one of them. So definitely, edge compute is starting to take it all. In the moment, the mobile cloud as well, because data center cloud pops are everywhere. And with this thing that modern applications are restructured to be able to unite edge and cloud. Edge is not a new thing like single facility delivery. It's accelerating through the edge access. So edge becomes everywhere.
A
Allison Klein3:55
Like what it provides, new opportunities but also new challenges, like security challenges.
D
David Aviv4:01
Well, that's why I'm here. And you deliver security solutions from cloud to edge.
A
Allison Klein4:09
Obviously, a lot of attention has been given to cloud security over the last 15 years, but edge security is a different beast. How do you view this, and how does that inform the decisions that you're making with your team about the security solutions you're bringing to market?
D
David Aviv4:26
Yeah, that's obviously the fact that the perimeter is being blurred. Actually, let's hope we will do a certain period. I mean, do we think I could define, let's say, a lot. I don't like to call it the virtual, but about a different kind of approaches to deal with it. And especially when the content delivery is essentially distributed through the supply chain, apps for the supply chain, especially for web-based applications, you know, the browser, the consumer browser is connected directly to the supply chain contents anywhere. Actually, it pushes the security to the edge, and when we say to the edge, up to the consumer itself, to the endpoints. So there are a couple of things. People like to say that identity forms the new perimeter. So what do we mean by identity? And the consumers, you know, in the enterprise, is a well-known part. I'm the user class model and stand up. So we are building new security solutions to cope with this threat in order to build and establish an identity on the consumers, on the browsers, to be able to evolve and provide such tracking capability, to be able to apply, detect abnormal activities anywhere and behind any perimeter view access.
A
Allison Klein6:09
Well, okay. Tell me about the solutions that you've brought to market, and what has been the market response to them?
D
David Aviv6:15
Okay, so at the network, we are leading, I'm glad, with the DDoS mitigation topic, network service provider networks with large scale ones. And we are adding to that kind of robust DDoS mitigation service a new form of distributed DDoS mitigation. And because of the distribution, because on the application and application protection, we are providing now a new stack. And using the stack, we'd like to call it providing the best-of-breed components to a best-of-suite. Why? Because the security in the stack contains today application, seven layers, anti-bot protection, web application, file and API protection, software brings four layers packaging. It's the one stack. If you remember, we talked about identity. Identity, user, crypto, analytics, it's a cross-layer. And for our behavioral anomaly detection across all the stacks.
A
Allison Klein7:39
What is the market response to the solutions, and have you heard anything interesting from your customers at Mobile World about things that are on their mind that maybe the industry hasn't paid attention to?
D
David Aviv7:51
Oh, and so that everyone accelerates much now. We meet a lot of both enterprise customers, they are building their 5G private, so-called the private network, or in the van. Obviously, service providers are building their 5G public. I would think that everyone now, especially the last year with the political tensions, new opportunities probably for the healthcare community. Sure. Is the real inflection. We prepare a lot of attention. We want that one, and especially on publicly exposed web resources, where everyone understands that exposing everything will be opened up to the malicious attacks first. And people understand that, especially those that are dealing now with the 5G projects, the business enterprise resources built or utilize inside.
A
Allison Klein9:15
You talked about some of the industry standards that are driving this space. Do you think that there's any industry standard work that needs to be done to address any of the attack challenges that we're still facing?
D
David Aviv9:29
Them all. Some standards, let's say, building the 5G standards. We are talking in the 5G world. I think the 6G will address some of the others because always there will be a lag between the general technical communities and protecting the network towards the new attack surface. And even if this leader will shift the security at chronology, that especially when you went to the 5G standalone with the primary use cases at the points is that then 5G and 6G definitely is actually utilizing almost web-based protocols. All the 5G core cells is based on HTTP-based protocols. Right. Not the access, the signaling address is the tradition. It opens up. Yeah, sure, there were web-based attacks. I don't. It is up to one taken girls. You know enough. I mean, I think we need to pay more attention to it.
A
Allison Klein10:54
What, as you look forward into 2023, what are the key things that you're looking for in the market in terms of the continued adoption within customers, and are there any headwinds that we're faced?
D
David Aviv11:07
I think more and more, let's take example the 5G. It's a consolidated technology. The microservices running in Kubernetes, then they go to the edge compute. They will never application running Kubernetes, and you're going to the 5G control SBA. Everything is running Kubernetes. So I said in that sense, everyone understands that the security running those applications to have two things: it's to be able to run as a Kubernetes native citizen in order to protect those applications, and secondly, be able to cope with the cadence of this application. Those applications are great and changing very fast. Security needs to follow up and want to adopt very fast to adopt the security model today. Containers. So that's the new trend in the security itself. And don't forget some of the key things that we do see besides it. Remember, security is now downloaded. It's software. Yep. It's a software reward from the CI/CD pipeline. So the same way you download the image, the application image, we have built our security to run the same way from the CI/CD pipeline, adapted to the image running into the cluster.
A
Allison Klein12:56
I've really enjoyed the conversation, and I've learned a lot about Radware and security at the edge. So thank you for the time. I'm sure my listeners are also intrigued. Where can they find out more information about the company and get in touch with your team?
D
David Aviv13:08
Radware.com. Since we're all over the globe, especially in North America, so you can find a lot of information, contact our sales team, and we will be more than happy to come and support you.
A
Allison Klein13:29
Thank you, and have a great Mobile World Congress.
D
David Aviv13:31
Thank you very much.
A
Allison Klein13:37
Thanks for joining the Tech Arena. Subscribe and engage at our website, thetecharena.net. All content is copyright by the Tech Arena.