Unify cloud security from code to runtime with CrowdStrike and Bionic
summary
Cloud threats climb year over year—95% more exploitations and a 288% rise in targeted attacks—and attackers average 79 minutes average breakout (fastest seven minutes). Demo shows a Kali/Metasploit chain: nmap detects Tomcat 8.0.32 then Metasploit runs an exploit to get root, query EC2 metadata for credentials, enumerate S3 and disable logging; wget download is immediately killed by the Falcon node sensor running as a Kubernetes DaemonSet. Indicates CloudTrail ingestion, ExPRT AI rerating, and Bionic app-mapping for pre-runtime and app-layer discovery.
AI-written summary · about
chapters (16)
- 0:00Introduction and speaker background
- 1:50Cloud threat landscape overview
- 10:11Top customer security challenges
- 12:03Common cloud attack tactics
- 24:18Live attack demonstration setup
- 28:48Executing the container attack
- 35:01Falcon platform detection and response
- 41:49Behavioral detections and false positives
- 43:15Agentless cloud security monitoring
- 45:06Pre-runtime security scanning
- 46:56Falcon Cloud Security components
- 47:37Bionic application security posture
- 49:27Application layer vulnerabilities
- 51:34Key recommendations for cloud defense
- 53:05Effectiveness and savings metrics
- 53:51Next steps and resources
related talks
43mClouds in the forecast: CrowdStrike cloud risk report
50mInsights into New Supply Chain and Cloud-Identity Attacks
49mEnhance container security with CrowdStrike Falcon Cloud Security
18mSecuring cloud innovation: Lessons learned
50mThe Anatomy of Cloud Attacks
44mLive Hacking Cloud Architectures
41mIdentifying and Mitigating Cloud and Container Threats
40mBeyond Public Buckets: Lessons Learned on Attack Detection in the Cloud