Live Hacking Cloud Architectures - Thorsten Jakoby and Mirna Alaisami

This talk explores the complexities of cloud architectures as organizations increasingly adopt diverse technologies, including container orchestrators, database services, event meshes, networking components, and virtual machines. The speaker emphasizes the crucial role of observability and security in monitoring potential attacks on these intricate application landscapes. Attendees can expect to see various attack vectors and strategies for mitigation, utilizing technologies such as Kubernetes, eBPF, Cilium, and Falco. The session includes a live demonstration of an attack on a real-world cloud architecture, showcasing the attacker's methods for scanning applications and executing lateral movement to exfiltrate data, while also inviting participants to engage as a blue team tasked with defending the system using modern open-source tools.