Serverless Security
Security Considerations for AWS Lambda Runtime API and Layers
Let’s start with some background - ...
Tracing AWS SDK Calls With No Code Changes for AWS Lambda Security
There is a lot of buzz around Lambda function monitoring. You can find about a dozen companies that will provide you with very nice tools for debugging, profiling and monitoring of your ...
PureSec Collaborates with Amazon Web Services to Provide Zero-Overhead Application Security for AWS Lambda Customers
The new PureSec protection layer for AWS Lambda is designed to help AWS customers further secure their serverless applications against cyber-attacks with minimal effort and no operational overhead TEL AVIV, Israel, November ...
AWS Security Best Practices: Lambda DoS Mitigation Strategies
Overview How to avoid DoS and design resilient serverless applications is one of the most common topics we hear when discussing AWS Lambda security with organizations that are in the process of ...
Google Cloud Functions Security: Now With FunctionShield Protection
Overview From the early days of PureSec, we’ve been talking about the fact that our technology was designed to be cross-platform, allowing it to run in any kind of serverless environment. PureSec ...
AWS Security Best Practices: AWS Lambda Security – Design for Failure
For security experts, the terms “Remote Code Execution” (RCE) or “Arbitrary Code Execution” makes the hairs on the back of their neck stand on end. This is because RCE is among the ...
Talking Serverless And AWS Lambda Security With Jeff Forristal
Introduction In my previous blog interview with Jeremiah Grossman, I mentioned that throughout the years, I befriended a small group of people, with which every discussion is always intriguing, challenging and truly ...
If It Happened To Facebook…
Earlier today, Facebook released a blog post regarding a recent discovered vulnerability in their platform, which apparently got exploited by attackers. Here's an excerpt from the Facebook blog: ...
PureSec Initiates Industry’s First OWASP Top 10 Project for Cloud-Native Application Security
As the leader in serverless security, PureSec is excited to announce that it has initiated work on a new OWASP incubator project that will identify some of the more critical risks related ...
