Performing security testing of Infrastructure as a Service requires not just traditional external infrastructure pen testing techniques, but also Hypervisor breakout testing, internal infrastructure testing, and new traps and tricks. This talk will cover some of the more interesting security bugs that have been found in the Cloud and the new techniques that have to be used to perform these types of assessments. This includes the Evil PXE attack, Dirty Disks, Hypervisor breakout etc.

This CREST video is suitable for self-directed CPD.

свернуть