Missing Piece of Cloud Security
summary
Cloud attackers increasingly target Linux and compile cross‑platform tools in Golang, repurpose Windows families like reevil and Lemon Duck, and deploy fileless malware and kernel rootkits that bypass wellconfigured AWS firewalls. Evidence: Q1 2020 cloud attacks +250%, ransomware average payout ~$500k with ~73% success, new Linux samples initially missed on VirusTotal. The missing piece is runtime protection — kernel module or agent that inspects memory/processes, plus code similarity analysis and patching; demo shows runtime termination stops miners inside compromised containers.
AI-written summary · about
chapters (8)
- 0:00Start
- 12:56Windows Malware Targeting Linux
- 19:04Vulnerabilities
- 21:20Supply Chain Attacks
- 24:46Runtime Protection
- 26:47Lemon Duck
- 34:10Solving the Puzzle of the Cloud
- 41:15Questions?
related talks
18mSecuring cloud innovation: Lessons learned
41mIdentifying and Mitigating Cloud and Container Threats
50mThe Anatomy of Cloud Attacks- 41mIdentifying and Mitigating Cloud and Container Threats
29mFrom Illuminating to Eliminating Crypto Jacking Techniques in Cloud Native
39mReal-World Detection Evasion Techniques in the Cloud
50mAvoiding cloud security anti-patterns the right way
50mInsights into New Supply Chain and Cloud-Identity Attacks