As more organizations embrace cloud technologies, there has been an increase in attackers targeting cloud deployments. Cyber attackers aggressively pursue crown jewels in a cloud through lateral movement using privileged escalations. On an average it takes more than 4 months to detect an attack. Attack containment and impact estimation are challenging tasks with increasingly complex cloud deployments. Conventional security products can no more keep up with the threat landscape. Organizations must take an offensive stance to security and they ought to be “on-the-hunt” to ensure they are protected.
In this talk we present how Attivo BOTsink solution detects and contains an attacker who has managed to compromise the weakest link in your OpenStack cloud. We will cover some of the key topics including:
- Learn how a non intrusive solution can go a long way in protection against cyber attacks
- Learn to use deception to detect an intruder inside your data center or OpenStack cloud
- Learn how to use Attivo BOTsink to contain and neutralize an attack in OpenStack deployment
