Episode 17: How to do penetration testing in cloud application

Episode 17 August 02, 2020 00:37:03
Episode 17: How to do penetration testing in cloud application
SilverLining IL
Episode 17: How to do penetration testing in cloud application

Aug 02 2020 | 00:37:03


Hosted By

Moshe Ferber Ariel Munafo

Show Notes


Guest: Oz Avenstein

Guest Title:  Founder

Company:  Avensec


Penetration tests are one of the strongest controls that we use. It is testing the overall resilience of our application and allows us to be more confident in our workloads. But in the cloud era, cloud applications pen testing needs to be coordinated with the providers. In this episode we talk with Oz Avenstein, an application security expert, about the challenges of cloud penetration testing and how to do it correctly.


0.50 introducing our guest

3.40 How is cloud penetration tests different from regular pen tests?

5.01 elaborating about IaaS/PaaS particular pen test policies 

8.45 pen testing SaaS applications 

11.05 relaying on 3rd party pen testing

12.02 cloud pen test considerations and phases

17.35 the actual pen testing 

21.20 the reporting phase

23.40 incorporating pen test into applications development cycle 

34:00 Summary and last words


Other Episodes

Episode 58

March 01, 2023 00:31:33
Episode Cover

SilverLining Episode 58: Quantum computing security challenges - CSA QSS working group

Guest: Ludovic Perret, Associate Professor at Sorbonne University & Co-founder of CryptoNext Security and Bruno Huttner , Director of Quantum Strategic Initiatives at ID...


Episode 49

April 06, 2022 00:37:28
Episode Cover

SilverLining Episode 49: Security for Fintech Companies

Guest: Alex Gestin Guest title:  CISO, Riseup Language: English   Abstract The growing number of fintech companies represent a shift in the market from traditional...


Episode 7

September 02, 2019 00:36:26
Episode Cover

Episode 7: Creating Trust in Cloud

Attendees Guest: Damir Savanović Guest title: Senior researcher Company: Cloud Security Alliance Abstract Creating trust is one of the major challenges for cloud providers...