Twitter
Facebook
LinkedIn
Google+
YouTube
Penetration Testing in the Cloud
Dan Lambright, Red Hat
This talk discusses challenges associated with ensuring your infrastructure is secure in the cloud. Cloud providers are very careful with letting customers run penetration tests because they can be misunderstood for real attacks, but such tests are needed to confirm data is safe. This talk discusses the conditions and limits of permissions obtainable, and explores methods of doing targeted tests in ways that will not affect others using multi-tenant hardware. A promising approach is to have a docker instance play the role of the hacker, and use an instance's internal network interface to carry out attacks.
Dan Lambright, Red Hat
Dan Lambright is a principal software engineer at Red Hat. By day he helps build the gluster distributed storage system, and by night he enjoys teaching Intrusion Detection as an adjunct professor at the University of Massachusetts at Lowell.
Open Access Media
USENIX is committed to Open Access to the research presented at our events. Papers and proceedings are freely available to everyone once the event begins. Any video, audio, and/or slides that are posted after the event are also free and open to everyone. Support USENIX and our commitment to Open Access.
author = {Dan Lambright},
title = {Penetration Testing in the Cloud},
year = {2014},
address = {Seattle, WA},
publisher = {USENIX Association},
month = nov
}
connect with us