4 ms·
Is there anything like this guide specific to securing "modern cloud machines" eg. the variety of Amazon AMIs?
by jerrya 13y ago
Is there anything like this guide specific to securing "modern cloud machines" eg. the variety of Amazon AMIs?
- pavs 13y agoI think its very difficult, if not impossible to have "paranoid level" security for a machine that someone else has full physical access. The assumption here is that amazon also have paranoid level security and their employees are 100% honest and will do nothing to compromise your machine.
- sweis 13y agoI am working on securing virtual machines against physical attacks (which yes, does sound impossible). Our approach requires code changes on the hypervisor level, which currently rules outs Amazon but is viable for bare-metal cloud providers. It also requires some specific CPU features and a TPM.
- alexwright 13y ago> The assumption here is that Amazon also have paranoid level security and their employees are 100% honest.. Add 100% competent to that too. I expect a bug is much more likely that a dishonest sysadmin or dev.