1. Life is Short When You Get Hacked
Andreas Wasita – Kloud Solutions
Amit Deshmukh – Rapid7

2. Life is Short when You Get Hacked
2

3. Sobering Statistics
3
These are just getting worse….
2014 – Year of the Breach

4. Assumptions on Cloud Adoption
AWS are responsible for my Security
No Breach on Cloud

5. 5
Shared Responsibility Model

6. Mapping the nature of Cyber Security Attacks
6
Compromising User Credentials
• IAM – AWS Identity and Access
Management
• MFA – Multi Factor Authentication
• RBAC model – Role Based
Access Control
• Policies
• Security Tools
Note: Do not use Root Access Keys!

7. Mapping the nature of Cyber Security Attacks
7
Legitimate IT Tools – Harder to
Detect
• Anti – Malware is not enough.
Codes mutate faster than your
signatures
• Applications Whitelisting
• Hardening
• Patch All Things – Servers and
Clients!

8. Mapping the nature of Cyber Security Attacks
8
Rogue inside Network – Avg 8 months
• AWS VPC
• Security Groups
• Defense in Depth
• Intrusion Detection and
Prevention

9. Mapping the nature of Cyber Security Attacks
9
Data Breach = Financial Loss
Thieves can’t steal what you don’t
have – Data minimization :
• No single data vault
• Access “As Needed” basis
• Purge the data
• Encryption

10. Know your enemies – WARNING! Labs only
• Physical Access Tools : Inception
https://github.com/carmaa/inception
• MITHM – Traffic Manipulation and Spoofing Tools : Cain
http://www.oxid.it/cain.html
• Offensive: Metasploit Framework http://www.metasploit.com/
• Creds Harvesting Tools: Mimikatz http://blog.gentilkiwi.com/mimikatz
• Password Brute Forcing Tools: Hydra https://www.thc.org/thc-hydra/
10

11. Gold Mine of Mind
http://www.troyhunt.com/ - Developer Security – MVP and Pluralsight
Author
https://www.schneier.com/ - Schneier on Security – This is the guy the US
Congress calls on to explain the really important security stuff
https://community.rapid7.com – Rapid7 Community
http://blog.kloud.com.au/ - Any Cloud, Machine Learning, Identity,
Security, IoT, DevOps
http://www.erdalozkaya.com/ - MVP, Certified Hacker, Licensed PenTest
11

12. Q n A
Andreas Wasita – Kloud Solutions
Amit Deshmukh – Rapid7