Security and Cloud Computing

[hydruh]

Re: Security and Cloud Computing

There (supposedly) is a copy of a book that I wrote on (I think Professional ASP.NET Web Services, back from 1.0) that was Goatse'd. Page after page, text overwritten with the oh-so-famous image. It was the ebook version on the torrents, though. That probably doesn't count.

S

[bascule]

Re: Security and Cloud Computing

Those are big concerns of any system, not just cloud computing.

If there's one thing that makes "cloud" security different from elsewhere, I think it's the centralization of command and control (i.e. automation of system management). If you compromise the command and control processes you effectively get access to a giant botnet to do your bidding, and if the command and control processes have the power to provision more instances (for "autoscaling"), you could grow the botnet as large as you want.

[streaker69]

Re: Security and Cloud Computing

If there's one thing that makes "cloud" security different from elsewhere, I think it's the centralization of command and control (i.e. automation of system management). If you compromise the command and control processes you effectively get access to a giant botnet to do your bidding, and if the command and control processes have the power to provision more instances (for "autoscaling"), you could grow the botnet as large as you want.

...and thus Skynet was born.

I for one welcome our process provisioning autoscaling overlords.

[hydruh]

Re: Security and Cloud Computing

I for one welcome our process provisioning autoscaling overlords.

That is fantastic. Can I use that with attribution?

S

[xor]

Re: Security and Cloud Computing

...and thus Skynet was born.

I for one welcome our process provisioning autoscaling overlords.

Resistance is futile

xor

[streaker69]

Re: Security and Cloud Computing

That is fantastic. Can I use that with attribution?

S

You can, but only after you sign an NDA. ;)

Sorry, I had to.

Resistance is futile

To complete the memes:

hai im in ur clouds messin wid ur provisions.

Now back to your regularly scheduled thread.

[valkyrie]

Re: Security and Cloud Computing

You can, but only after you sign an NDA. ;)

Sorry, I had to.



To complete the memes:

hai im in ur clouds messin wid ur provisions.

Now back to your regularly scheduled thread.

You have to sign one too. :-)

Regards,

valkyrie
___________________________________________
sapere aude

[bascule]

Re: Security and Cloud Computing

...and thus Skynet was born.

I for one welcome our process provisioning autoscaling overlords.

Did I win buzzword bingo?

[bascule]

Re: Security and Cloud Computing

Not sure how much interest there actually is on this topic, but I saw an awesome presentation on it I thought I should share:

http://www.infoq.com/presentations/s...ucture-gluecon

[hydruh]

Re: Security and Cloud Computing

Thanks for that bascule. I am actively pursuing the topic, and totally forgot to look ANYONE up about it at Defcon. I didn't find Valkyrie or you or anyone. Shit, I'm a waste. Anyone going to Shmoocon?

I actually have a host who is willing to put up with security testing, and also I am working on securing funding. I'll tell you one thing, I'll never EVER post with Sys-con again. They are evil.

Anyway, thanks, and keep checking on things. And that Glue conference looks damn cool.

S