Sunshine Through the Clouds: Successful Penetration Testing in Cloud Environments

No ratings

Presented at Securi-Tay 2020 by

Paco Hope

Running world-class, scalable infrastructure in the cloud means deploying cloud-native security that is resilient, adaptive, and responsive. We can use penetration tests to give us confidence that the infrastructure has been implemented correctly. Cloud infrastructure, though, is best secured using cloud-native mechanisms. Testing that infrastructure, then, means looking at new and different aspects of the infrastructure. This is not your father's penetration test. If you're going in cold to test cloud infrastructure, what should you look for? What are the cloud-specific checks that have the best value? How can we ensure that the clouds are full of rainbows and remain a safe place for unicorns to frolic and play?