Only Takes a Spark: Popping a Shell on 1000 Nodes (Q&A)
ayoul3 answers audience questions regarding Apache Spark cluster penetration testing, REST API security, and big data isolation.
Summary
DEF CON Security Research Presentation
This talk covers technical security topics and vulnerability research. The presentation includes discussion of contemporary security challenges, demonstrations of exploitation techniques, and insights into defensive countermeasures and security best practices.
(AI summary — Claude Haiku)
Related talks
Main Stage·45 min
ayoul3
ayoul3 details attacking Apache Spark big data clusters, demonstrating how misconfigurations and unauthenticated APIs yield root shells across thousands of nodes.
Main Stage·42 min
Sheila A. Berta
Sheila A. Berta exposes critical security oversights across enterprise Big Data stacks (Hadoop, Spark, Flink), executing remote code execution on distributed analytics clusters.
Main Stage·27 min
Dylan Ayrey · Allison Donovan
Dylan Ayrey and Allison Donovan answer questions regarding Google Cloud IAM nuances, default service accounts, and cloud lateral movement.