Inside Out - The Cloud has Never been so Close
Industry experts analyze emerging threats surrounding Inside Out - The Cloud has Never been so Close.
Summary
Presents a graph-based approach to attacking cloud infrastructure via internet-accessible APIs. Maps relationships between cloud resources, identities, and IAM policies to find privilege-escalation paths where credential theft plus over-privileged DevOps accounts enables high-value resource access. Demonstrates how attackers abuse existing cloud features when traditional network defenses do not protect the management API surface.
Related talks
Microsoft Security Response Center (MSRC)·25 min
Engineers explore architecture and security mechanisms for BlueHat Oct 23. S23: Inside MSRC Cloud Vulnerability Management.
fwd:cloudsec North America·39 min
David Challoner
David Challoner analyzes Bulletproofing Your Cloud: Lessons from inside the Borg.
RSAC Cybersecurity·51 min
Analysts investigate attack surfaces and defenses concerning Assume Breach: An Inside Look at Cloud Service Provider Security.