0x0A: AppSec is Hard, CloudSec is Easy… Isn’t It?

Cloud Security is often perceived as easier than Application Security. The vulnerabilities may look different from those in traditional applications but does a different attack surface really mean it's easier?

In this talk, M. Yuga Nugaraha will share why he believe Cloud Security isn't all that different from AppSec. The biggest difference is the attack surface. Rather than focusing on application logic, cloud security revolves around understanding how infrastructure is exposed and managed through APIs. Once you understand how cloud services are designed to work, you will realize that the biggest risks often come from abusing features rather than exploiting vulnerabilities