Attack & Defense in AWS Environments

Instructors - Vaibhav Gupta & Sandeep Singh

Pre-Requisites -

- Machine with at least 8 GB RAM and 20 GB free HD space

- Need to have AWS account (Free-tier)

- VirtualBox [VMs will be provided]

- Basic understanding of AWS

AWS is the most widely used cloud environments today and almost every security professional have to encounter this environment whether you are attacking an organization or defending it. In this fast-paced workshop we will teach participants with some neat tools, techniques and procedures to attack the most widely used AWS services as well as to defend them.

- Recon / Information Gathering on AWS Services

- Attacking S3 buckets

- Exploiting web application flaws to compromise AWS services (IAM/KMS)

- Attacking Serverless applications

- Disrupting AWS Logging

- Attacking Misconfigured Cloud SDN

Takeaways:

Students will be able to understand and appreciate the delta in attack surface which gets added due to moving to cloud. And subsequently design architecture and develop applications to defend them.

What Participants will be provided?

- PDF copy of slide deck

- Lab VM

- Workshop lab manual

- Bonus labs

Target Audience:

- Cloud Security Engineers

- DevOps engineers

- Security Analyst

- Penetration Testers

- Anyone else who is interested in Cloud Security

- If you are an Expert or Advanced user, you may join us as co-trainers! :-)