Beyond Login Attempts: Detecting Threats in SaaS Applications

No ratings

Presented at BSides Denver 2024 by

Julie Sparks

Enterprise adoption of SaaS applications is rapidly increasing, leading to a growing repository of critical customer and production system data within these cloud-based platforms. Consequently, cyberattacks targeting SaaS environments are becoming a significant concern. Threat detection plays a crucial role in mitigating these risks by providing additional security coverage for these applications. We'll explore the unique challenges of threat detection in SaaS environments, including shared responsibility models and limited visibility into application internals. You'll learn how to craft threat detections that go beyond basic login attempts and focus on identifying malicious behavior within the application itself.