Seeing Through the Fog: Cloud Security and Open-Source Defenses
Zack Fasel cuts through vendor hype surrounding enterprise cloud security, auditing provider API vulnerabilities and introducing open-source defensive monitoring tools.
Summary
Cutting Through the Cloud Security Marketing Fog
As enterprise adoption of public cloud infrastructure expanded, security vendors introduced a flood of proprietary, cloud-hosted security tools promising total visibility and governance.
Auditing Systematic Cloud Provider Vulnerabilities
Zack Fasel conducts a technical audit of common security shortcomings across major public cloud providers, highlighting insecure API defaults, permissive IAM configurations, and logging blind spots.
Pragmatic Hardening and Remediation
Fasel demonstrates practical fixes to mitigate widespread misconfigurations without incurring excessive vendor costs or introducing complex management overhead.
Open-Source Tooling for Cloud Defense
The presentation unveils community-driven, open-source security tools designed to monitor cloud API activity, enforce baseline policies, and provide continuous defensive posture validation.
Related talks
Videos·36 min
Presenters detail vulnerability discovery and exploitation in Cloud Security Done Right: AttackIQ’s Game Plan.
Videos·3 min
Industry experts analyze emerging threats surrounding AttackIQ Cloud Security Optimization for Azure.
Videos·3 min
Analysts investigate attack surfaces and defenses concerning AttackIQ Cloud Security Optimization for AWS.