On-Demand Webinar: Advanced Multicloud IMDS Security

IMDS: The Gatekeeper to Your Cloud Castles (and How to Keep the Dragons Out)

[On-Demand]

Most of us know IMDS as a tool for seamlessly maintaining and supplying credentials for applications running on instances to access resources in cloud environments. However, a deep understanding of IMDS implementations across cloud providers is what separates the security novices from the advanced practitioners - and can be crucial for the security of your cloud environment.

At this webinar, we’ll take a deep dive into the protections offered by different cloud service providers for the IMDS used by computing instances, and how they have evolved over time. We’ll demonstrate how these mechanisms could mean the difference between a critical and non-critical vulnerability, through the story of a real-life vulnerability we found in a leading cloud provider. We’ll talk about the customer’s part of the shared responsibility model in this context - and how that must evolve as well.

We’ll demonstrate how vulnerable software may be leveraged by an attacker to gain access to credentials and talk about the kind of compensating controls which may be used to mitigate this risk.

Join us to learn more about:

  • Protections offered by different cloud service providers for the IMDS used by computing instances
  • How these mechanisms could mean the difference between a critical and non-critical vulnerability
  • Your part of the shared responsibility model

Hosted by:
Lior Zatlavi, Sr. Cloud Security Architect, Ermetic
Liv Matan, Security Researcher, Ermetic

 

Fill in your details to watch the webinar!