Pentesting Cloud Environments

The traditional approach to pen test has been hey, I just got to buy that. But if you want to penetration test a cloud environment you have to look at roughly how many accounts are we talking about and roughly how many resources are there. And so it is an art and a science right because it balances between that like sometimes you spend four hours looking at something that just doesn't come to fruition or even when you succeed. That's where it gets complicated in terms of cloud is like let's say my attack path is through, you know, ECS, but I've never exploited ECS specifically. Right now I have to learn how to pull that attack off right."

Transcript

Play full episode

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!

Get the app