Pipeline Precognition: Predicting Cloud Attack Paths Before Deployment

Learn how to predict and prevent cloud security attack paths before deployment in this 25-minute conference talk from fwd:cloudsec. Explore innovative approaches to modeling cloud infrastructure, identity, and vulnerability data using graph database technologies with Staff Security Engineer Brad Geesaman. Discover how the open-source project Caizen enables near real-time modeling of GCP environments and attack path calculation, while its companion tool Psychiac analyzes proposed infrastructure changes within CI pipelines. Gain insights into overcoming traditional limitations of cloud security analysis and understand the potential future state where security risks can be identified and addressed pre-deployment. Follow along as Geesaman demonstrates practical applications of these tools and discusses the path toward achieving true security precognition in cloud environments.