About this session
It’s being said that identities are the new digital perimeter, as work moves away from traditional networks with unprecedented adoption of cloud services and software-as-a-service (SaaS).
Attackers are turning their attention to this new landscape, which means we need to re-think what we know about how attacks unfold, and how to stop them.
Luke presented his research on the SaaS attack matrix, a repository collection of SaaS-specific attack techniques (which you can find on GitHub) designed for security researchers, red/blue teams, and penetration testers, allowing them to learn about and share SaaS attack techniques.
As well as presenting research, Luke highlighted the use cases for some of the most impactful and prevalent techniques (many of which we now see in the wild) and demonstrated how they could be chained together in ‘networkless’ attacks that don’t touch company endpoints.
Speakers
Have a question on this talk?
Send it to the presenter. The team passes it on and the reply comes to you by email.
