Egress Filtering in AWS; And other Sisyphean tasks

Presented at CactusCon 11 (2023), Jan. 27, 2023, 5 p.m. (60 minutes).

Egress filtering - we're all supposed to do it, and yet no one does. Or, maybe you rely on an expensive blinky box to keep your auditors happy. In this talk, I go over some actual threats in cloud environments as well as some that you may not have considered. I then discuss how to mitigate these with native cloud security controls, and a few commercial options.

Presenters:

• David Gilman - Sr Security Engineer
  David is a senior application security engineer. He got his start in software as a product manager at a custom software company and graduated with a B.S. in Technology Georgia Tech with a M.S. in Cybersecurity.

Links:

• https://cactuscon-11.sessionize.com/session/381852

Similar Presentations:

• DEF CON 25 (2017) / The Adventures of AV and the Leaky Sandbox
• SAINTCON 2019 / The Culture of Filtering: Filtering for Fear vs Filtering for the Student
• DerbyCon 2.0 Reunion (2012) / Personal Darknet or How to get pr0n @ work