Microservices and FaaS for Offensive Security
Scaling offensive security testing using serverless functions and distributed cloud infrastructure.
Summary
Serverless Computing
Cloud providers offer serverless or Function-as-a-Service platforms for rapid application deployment without dedicated servers. These platforms enable scaling of time-consuming offensive security tasks.
Scaling Opportunities
Attacks previously impractical due to time and resource constraints become feasible. Cloud services provide unlimited scaling with public IP addresses for attribution avoidance.
Offensive Applications
Undetected port scans against short-lived services, brute-force attacks on services and OTP values, and opportunistic attacks benefit from cloud scaling. Custom databases like Shodan/Censys and IPv6 exploration become practical.
Guide and Demonstrations
The presentation provides a guide for scaling offensive tools and demonstrates practical benefits of cloud services. Attendees learn how cloud platforms can enable sophisticated offensive testing previously limited by resources.
Related talks
Videos·36 min
Presenters detail vulnerability discovery and exploitation in Cloud Security Done Right: AttackIQ’s Game Plan.
Videos·3 min
Industry experts analyze emerging threats surrounding AttackIQ Cloud Security Optimization for Azure.
Videos·3 min
Analysts investigate attack surfaces and defenses concerning AttackIQ Cloud Security Optimization for AWS.