Security and Cloud Computing

[hydruh]

Re: Security and Cloud Computing

Thanks for that bascule. I am actively pursuing the topic, and totally forgot to look ANYONE up about it at Defcon. I didn't find Valkyrie or you or anyone. Shit, I'm a waste. Anyone going to Shmoocon?

I actually have a host who is willing to put up with security testing, and also I am working on securing funding. I'll tell you one thing, I'll never EVER post with Sys-con again. They are evil.

Anyway, thanks, and keep checking on things. And that Glue conference looks damn cool.

S

[bascule]

Re: Security and Cloud Computing

Not sure how much interest there actually is on this topic, but I saw an awesome presentation on it I thought I should share:

http://www.infoq.com/presentations/s...ucture-gluecon

[bascule]

Re: Security and Cloud Computing

...and thus Skynet was born.

I for one welcome our process provisioning autoscaling overlords.

Did I win buzzword bingo?

[valkyrie]

Re: Security and Cloud Computing

You can, but only after you sign an NDA. ;)

Sorry, I had to.



To complete the memes:

hai im in ur clouds messin wid ur provisions.

Now back to your regularly scheduled thread.

You have to sign one too. :-)

Regards,

valkyrie
___________________________________________
sapere aude

[streaker69]

Re: Security and Cloud Computing

That is fantastic. Can I use that with attribution?

S

You can, but only after you sign an NDA. ;)

Sorry, I had to.

Resistance is futile

To complete the memes:

hai im in ur clouds messin wid ur provisions.

Now back to your regularly scheduled thread.

[xor]

Re: Security and Cloud Computing

...and thus Skynet was born.

I for one welcome our process provisioning autoscaling overlords.

Resistance is futile

xor

[hydruh]

Re: Security and Cloud Computing

I for one welcome our process provisioning autoscaling overlords.

That is fantastic. Can I use that with attribution?

S

[streaker69]

Re: Security and Cloud Computing

If there's one thing that makes "cloud" security different from elsewhere, I think it's the centralization of command and control (i.e. automation of system management). If you compromise the command and control processes you effectively get access to a giant botnet to do your bidding, and if the command and control processes have the power to provision more instances (for "autoscaling"), you could grow the botnet as large as you want.

...and thus Skynet was born.

I for one welcome our process provisioning autoscaling overlords.

[bascule]

Re: Security and Cloud Computing

Those are big concerns of any system, not just cloud computing.

If there's one thing that makes "cloud" security different from elsewhere, I think it's the centralization of command and control (i.e. automation of system management). If you compromise the command and control processes you effectively get access to a giant botnet to do your bidding, and if the command and control processes have the power to provision more instances (for "autoscaling"), you could grow the botnet as large as you want.

[hydruh]

Re: Security and Cloud Computing

There (supposedly) is a copy of a book that I wrote on (I think Professional ASP.NET Web Services, back from 1.0) that was Goatse'd. Page after page, text overwritten with the oh-so-famous image. It was the ebook version on the torrents, though. That probably doesn't count.

S

[valkyrie]

Re: Security and Cloud Computing

Yes you won't find a multi-headed polymorphic Goatse forever rootkit in one of those.

xor

Probably why my computer is not infected with multi-headed polymorphic Goatse forever rootkits.

:-)

Regards,

valkyrie
____________________________________________
sapere aude

[xor]

Re: Security and Cloud Computing

Only from trusted advisers. Most of my education is old school. They are called "books." :-D

Yes you won't find a multi-headed polymorphic Goatse forever rootkit in one of those.

xor

[hydruh]

Re: Security and Cloud Computing

That linky was worth it. Thanks, DT. Looking forward to the AV.

S

[valkyrie]

Re: Security and Cloud Computing

If you don't click linkies(needs to be added to the dictionary) then how do you circumnavigate the WWW?

xor

Only from trusted advisors. Most of my education is old school. They are called "books." :-D

Regards,

valkyrie
________________________________
sapere aude

[xor]

Re: Security and Cloud Computing

Thank you for sharing. I don't normally click linkies. Very nice.

If you don't click linkies(needs to be added to the dictionary) then how do you circumnavigate the WWW?

xor