Inside Out - The Cloud has Never been so Close
Igal Gofman, Yaron Shani at Black Hat Europe 2019
In this talk, we present an alternative new approach for attacking cloud infrastructure. We use graphs to build and illustrate the relationships between different resources, identities, and policies. After mapping all the relationships, we show how adversaries can easily abuse existing features to escalate privileges and get to high-value resources.
Full Abstract & Presentation Materials: https://www.blackhat.com/eu-19/briefings/schedule/#inside-out---the-cloud-has-never-been-so-close-17797
Full Abstract & Presentation Materials: https://www.blackhat.com/eu-19/briefings/schedule/#inside-out---the-cloud-has-never-been-so-close-17797