4 ms·
How does cycling AWS instances quickly provide additional security beyond obscurity?
by matthewaveryusa 9y ago
How does cycling AWS instances quickly provide additional security beyond obscurity?
- sanxiyn 9y agoObscurity does provide additional security.
- MichaelApproved 9y agoThey aren’t trying to obscure, they’re trying to be a moving target.
- lloydde 9y agoRotate, Repave, and Repair “Its idea is quite simple. Rotate datacenter credentials every few minutes or hours. Repave every server and application in the datacenter every few hours from a known good state. Repair vulnerable operating systems and application stacks consistently within hours of patch availability. Faster is safer.” https://builttoadapt.io/the-three-r-s-of-enterprise-security-rotate-repave-and-repair-f64f6d6ba29d https://builttoadapt.io/the-three-r-s-of-enterprise-security...
- disordr 9y agoWhen you reboot your EC2 instance, that VM is provisioned on a (patched) system.
- _callcc 9y agoYes, they would have been better off leaving out this "cycling" bit altogether.
- TJSomething 9y agoPerhaps proving that you're running on the same hardware as Coinbase is most easily done by statistical attacks, which requires collecting data over time.
- dsacco 9y ago> How does cycling AWS instances quickly provide additional security beyond obscurity? The same way issuing a new session token for each login improves security. If the changes are unpredictable, whatever process an attacker uses to guess the correct target must be restarted every time the target changes.