Attacking and Defending Machine Learning Applications of Public Cloud
Explore techniques for attacking and defending machine learning applications in public cloud environments, focusing on visual classification vulnerabilities and countermeasures.
Dynamic Process Isolation
Explore cloud computing security with in-process isolation techniques, addressing vulnerabilities in shared hardware resources while maintaining high performance.
Bringing a Machete to the Amazon
Explore AWS security challenges, vulnerabilities, and solutions. Learn assessment techniques and tools to protect your cloud infrastructure and applications.
From Zero to Secure in One Minute
Automated cloud security tool for rapid instance lifecycle: pre-configured, patched, encrypted, and auto-mitigated. Introduces "Cloudefigo" for accelerated security in dynamic cloud environments.
Defense at Hyperscale - Technologies and Policies for a Defensible Cyberspace
Explore strategies for achieving defensible cyberspace through innovative technologies, operational improvements, and policies that prioritize defense over offense in the digital realm.
Silently Breaking ASLR in the Cloud
Exploit memory deduplication to defeat ASLR in cloud environments, leaking randomized base addresses of libraries and executables in neighboring VMs using a side-channel attack.
Cloud Keep - Protect Your Secrets at Scale
Explore Cloud Keep, an open-source key management solution for secure data protection in cloud environments. Learn about its architecture, implementation, and future plans for enhancing cloud security.
Don't Fear the Cloud - Secure Solutions at Lower Cost
Explore secure cloud solutions for cost-effective operations. Learn about shared responsibility, encryption, and global deployment strategies to overcome security concerns and leverage cloud benefits.
Open Policy Agent Intro
Introduction to Open Policy Agent: A versatile policy engine for Kubernetes, microservices, CI/CD, and cloud. Learn about its features, use cases, and the OPA Gatekeeper project.
Can Your Cloud Keep a Secret?
Explore cloud security challenges and best practices for protecting sensitive data in modern infrastructure. Learn strategies to safeguard your cloud environment from potential threats and vulnerabilities.
Splunking the Clouds - Finding the Needle in AWS & Azure
Explore cloud security techniques for AWS and Azure, focusing on identifying and addressing potential vulnerabilities using Splunk's powerful data analysis capabilities.
Why Does Your Data Leak? Uncovering the Data Leakage in Cloud from Mobile Apps
Explores root causes of data leaks in cloud-based mobile apps, revealing authentication and permission issues. Presents automated analysis techniques to identify vulnerabilities in cloud API usage.
Cloud Chatter - Defending Against Cloud C2
Explore strategies for defending against cloud-based command and control (C2) attacks, enhancing your cybersecurity skills to protect cloud infrastructure from sophisticated threats.
Evil Neighbour Attacks on SaaS Platforms - Cloudflare, Bitbucket, Etc
Explore potential vulnerabilities in popular SaaS platforms through Evil Neighbour attacks, uncovering security risks and mitigation strategies for cloud-based services.
Hopping in the Clouds - Migration Between Cloud Providers
Explore cloud migration strategies, infrastructure evolution, and cost optimization for large PHP applications, with insights from a Rackspace to Amazon transition.
Beyond the MCSE - Active Directory for the Security Professional
Comprehensive exploration of Active Directory's critical components, security features, and vulnerabilities, empowering security professionals to better defend enterprise resources against sophisticated attacks.
Defense at Hyperscale - Technologies and Policies for a Defensible Cyberspace
Explore strategies for achieving defensible cyberspace through innovative technologies, operational improvements, and public policies that provide cost-effective security at scale.
Hardening AWS Environments and Automating Incident Response for AWS Compromises
Learn to automate incident response in AWS, collect forensic evidence, and secure your cloud environment against API key compromises through proper configuration and monitoring.
Viral Video - Exploiting SSRF in Video Converters
Exploiting SSRF vulnerabilities in video converters using HLS playlists, potentially leading to critical security breaches in cloud-based services. Includes demonstration of attacks on major platforms.
Access Keys Will Kill You Before You Kill the Password
Explore AWS API security, focusing on access key risks and MFA implementation. Learn strategies and tools for enhancing authentication without compromising workflow efficiency.
Account Jumping Post Infection Persistency & Lateral Movement in AWS
Explore AWS security vulnerabilities, infection methods, and post-infection techniques. Learn about account jumping, resource manipulation, and best practices for protecting cloud environments.