Cloud Village·30 min
Chris Le Roy
Exploiting cloud infrastructure and CI/CD pipelines through build process compromises.
cloud-exploitationdevsecopsinfrastructure-attacks+2
DEF CON 27/Cloud Village across years
Cloud Village DC27
Paris, Bally's, Flamingo, and Planet Hollywood hotels, Las Vegas · 8-11 August 2019 · 7 talks
Cloud Village at DEF CON 27 covers cloud security for AWS, Azure, GCP, and other platforms. The 7 talks explore Azure assessment, cloud policy-as-code, security auditing with Splunk/ELK, automotive cloud hacking, secure defaults, air-gapping, and AWS security best practices.
1–7 of 7 talks
Cloud Village·34 min
Tanya Janca
DIY methodology for assessing and auditing Azure cloud security posture.
cloudappseccloud-security+2
Cloud Village·32 min
Rotem Bar
Cloud-based attacks on automotive systems and connected vehicle platforms.
automotive-cloudcloud-exploitationvehicle-connectivity+2
Cloud Village·27 min
Setu Parimi
Policy-as-code automation for managing cloud security and compliance policies.
policy-as-codecloud-complianceautomated-compliance+2
Cloud Village·31 min
Ayman Elsawah
AWS Service Control Policies for efficient cloud security and compliance management.
aws-securityservice-control-policiescloud-governance+2
Cloud Village·26 min
Rod Soto
SIEM tools (Splunk, ELK) for cloud security auditing and threat detection.
cloud-auditingsiemsplunk+2
Cloud Village·27 min
Erick Galinkin
Network segmentation and airgapping strategies for cloud infrastructure defense.
network-segmentationairgappingzero-trust+2