"All Your Trust Are Belong to Us" - Kesten Broughton
Автор: fwd:cloudsec
Загружено: 2020-07-10
Просмотров: 666
Описание:
All Your Trust Are Belong to Us
Speaker: Kesten Broughton
Kesten Broughton holds a BSc in math and physics and is currently the Cloud Services Lead at Praetorian. Prior to working as a security engineer, he worked in devops wrangling cloud and container infrastructure.
Abstract: Cloud providers often talk about the shared responsibility model between provider and customer. But there is another actor in the web of trust, the 3rd party vendor. These include cloud security, logging, and data analytics SaaS offerings. Customers trust those 3rd party providers to access their cloud infrastructure to deliver a service. While conducting research at Praetorian, the author discovered that 39.5% (with a sample of n=90) of AWS service providers which used cross-account role trust had a flaw in the way they provisioned trust into a customer's account. In other words, many companies who's sole purpose is to make your cloud more secure, provided a backdoor to your cloud deployment; many of the vulnerable vendors have over 2k customers and 1B in revenues.
Повторяем попытку...
Доступные форматы для скачивания:
Скачать видео
-
Информация по загрузке:
