Hacking Serverless Applications: A Treasure Map for Uncharted Waters
Matteo Rosi
BSides NYC 2023 (0x04) · Day 1 · Talk - Red
Matteo Rosi's talk, "Hacking Serverless Applications: A Treasure Map for Uncharted Waters," delivered at BSides NYC, explores the evolving landscape of application security in the era of serverless computing. As organizations increasingly migrate from monolithic and microservices architectures to highly distributed, event-driven serverless models, new security paradigms and vulnerabilities emerge. Rosi provides a comprehensive look into these uncharted waters, highlighting the unique challenges and attack vectors inherent in serverless environments.
AI review
Competent serverless security survey hitting the expected marks — overprivileged IAM, SpEL injection leading to credential exfiltration, supply chain risk, Denial of Wallet. Live demos are a genuine plus for a BSides crowd, but the material doesn't advance the state of knowledge for anyone who's read the OWASP Serverless Top 10 or watched any prior Lambda security talk.