Security Analytics in the Cloud

Explore security analytics in the cloud through this 45-minute conference talk from BSides Tampa 2019. Delve into various types of modern threats, including common DDoS attack patterns and applications. Learn about secure design considerations for security professionals and discover AWS building blocks for baseline defense. Gain insights on setting up baseline defenses, specifically addressing DDoS attacks using AWS Shield. Examine recent significant attacks tracked by the AWS DDoS Response Team and understand the benefits of moving user interaction to an edge network. Investigate Web Application Firewall (WAF) capabilities and their importance in cloud security. Additionally, cover Office of Foreign Assets Control (OFAC) compliance in the context of cloud security analytics.

Intro
Goals & Agenda
Types of Threats That Exist Today
Common DDOS Attack Patterns
Common Applications
Secure Design Considerations for the Security Professional
AWS Building Blocks for Baseline Defense
Setting Up Your Baseline Defenses
What About DDOS Attacks?
Setting Up Your Baseline Defense with AWS Shield
DDoS Mitigation on the AWS Edge Network
Recent Significant Attacks Tracked by the AWS DDoS Response Team
Benefits of Moving User Interaction to an Edge Network
Web Application Firewall (WAF)
WAF Capabilities
Office of Foreign Assets Control (OFAC) Compliance