Uncovering Azure's Silent Threats - A Journey into Cloud Vulnerabilities
Explore security vulnerabilities in Azure ML, uncovering potential threats in cloud-based machine learning platforms and discussing implications for AI/ML system adoption.
Identifying and Reducing Permission Explosion in AWS - A Graph-Based and Analytical Approach
Explore a graph-based approach to identify and mitigate permission explosion in AWS, enhancing cloud security and reducing potential risks in complex infrastructures.
Evading Logging in the Cloud - Bypassing AWS CloudTrail
Explore AWS API vulnerabilities that allowed CloudTrail logging bypass, uncovering security flaws in various AWS services and their subsequent fixes.
One Drive, Double Agent - Clouded OneDrive Turns Sides
Explore how OneDrive can be exploited for ransomware attacks, bypassing traditional EDR defenses. Learn about novel techniques and their implications for cloud security.
97 Things Every Cloud Engineer Should Know
Insights from industry experts on cloud computing essentials, covering architecture, migration, security, operations, and culture for comprehensive cloud engineering knowledge.
Intrusion Detection in the Clouds
Explore cloud-based intrusion detection strategies for shared hosting environments, addressing security challenges and implementing effective monitoring solutions.
Attacks are Forwarded - Breaking the Isolation of MicroVM-based Containers Through Operation Forwarding
Explores vulnerabilities in microVM-based containers, demonstrating operation forwarding attacks that can break isolation, exploit host kernel vulnerabilities, and exhaust resources on public cloud platforms.
Understanding Security Implications of Exposed Cloud Services through Automated Capability Inference
Explores security risks of over-privileged cloud credentials in mobile apps, revealing potential data attacks and new threat vectors through analysis of 1.3 million apps across major cloud platforms.
Permit to Cloud - Land with Confidence in Azure
Explore Azure tools for governance, standards, and infrastructure. Learn to create secure, compliant cloud solutions using resource templates, Bicep, blueprints, and DevOps processes like GitHub Actions.
Uncovering Azure's Silent Threats - A Journey Into Cloud Vulnerabilities
Explore Azure ML vulnerabilities, including credential leaks and sensitive information disclosure. Learn analysis techniques for assessing managed cloud services and understanding shared security responsibilities.
Get Off of My Cloud - Cloud Credential Compromise and Exposure
Explore cloud security vulnerabilities, credential compromise techniques, and mitigation strategies for protecting sensitive data in cloud environments.
Can Cloud and Security Be Used in the Same Sentence
Explore cloud security concerns, best practices, and benefits in enterprise environments. Learn about encryption, two-factor authentication, and DevOps approaches for improved security and efficiency.
Cloud Business and Academia - Bringing It All Together - Cloud Security Alliance Delaware
Explore the intersection of cloud technology, business, and academia with insights from the Cloud Security Alliance Delaware chapter.
Analyzing Weak Areas of the Federal Cloud Security Program
Analyzing weaknesses in federal cloud security, focusing on FedRAMP, IRS audits, accountability, system boundaries, and continuous monitoring for improved cybersecurity.
The Canary in the Cloud
Explore cloud security vulnerabilities and detection techniques with insights on protecting sensitive data and infrastructure in cloud environments.
Hijacking Label Switched Networks in the Cloud
Explore techniques for hijacking label switched networks in cloud environments, focusing on security vulnerabilities and potential attack vectors.
Critical Infrastructure - The Cloud Loves Me, The Cloud Loves Me Not
Explore the complex relationship between critical infrastructure and cloud computing, examining benefits, risks, and strategies for secure integration.
Intrusion Detection in the Clouds
Learn effective cloud-based intrusion detection techniques and strategies to enhance your organization's cybersecurity posture in this informative presentation by Josh Pyorre.
Hijacking Label Switched Networks in the Cloud
Explore techniques for hijacking label switched networks in cloud environments, focusing on security vulnerabilities and potential countermeasures.
Mobile Application Reverse Engineering Under the Hood
Explore mobile app reverse engineering techniques, from sensitive data extraction to analyzing Android package files, with practical tools and methods for both iOS and Android platforms.
How the Cloud Drives Better Security
Explore how cloud technology enhances security, addressing data loss, user experience, and threat detection. Learn about innovative approaches to protect digital assets in the modern era.