{"id":10511,"date":"2022-07-07T07:26:06","date_gmt":"2022-07-07T07:26:06","guid":{"rendered":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/?post_type=session&p=10511"},"modified":"2023-08-23T02:23:26","modified_gmt":"2023-08-23T02:23:26","slug":"breaking-ml-services-finding-0-days-in-azure-machine-learning","status":"publish","type":"session","link":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/session\/breaking-ml-services-finding-0-days-in-azure-machine-learning\/","title":{"rendered":"Breaking ML Services: Finding 0-days in Azure Machine Learning"},"content":{"rendered":"

Cloud service providers<\/span> offer<\/span> Machine<\/span>–<\/span>Learning<\/span>–<\/span>as<\/span>–<\/span>a<\/span>–<\/span>Service<\/span> platforms, enabling <\/span>companies <\/span>to <\/span>leverage<\/span> the power of <\/span>scalability<\/span> & <\/span>reliability<\/span> while performing ML operations<\/span>. <\/span>With <\/span>huge adoption of <\/span>such systems <\/span>worldwide<\/span>, the security <\/span>posture <\/span>of the platform itself <\/span>often <\/span>may <\/span>go <\/span>unnoticed<\/span> as <\/span>it has been <\/span>observed<\/span> in <\/span>previous<\/span> r<\/span>esearch <\/span>about <\/span>vulnerabilities in Google\u2019s <\/span>AI<\/span> Hub and AWS\u2019s <\/span>Sagemaker<\/span> Jupyter<\/span> Notebook <\/span>services<\/span>.<\/span><\/span>\u00a0<\/span>
<\/span>\u00a0<\/span>
<\/span>We investigated <\/span>Azure ML<\/span>, a <\/span>managed <\/span>MLaaS<\/span> offering <\/span>from Microsoft<\/span>.<\/span> W<\/span>e <\/span>found <\/span>five 0days over <\/span>three <\/span>broad <\/span>classes of security issues<\/span> namely<\/span>:<\/span><\/strong><\/span>\u00a0<\/span>
<\/span><\/strong>\u00a0<\/span><\/strong>
<\/span>I<\/span>nsecure <\/span>logging of sensitive information<\/span><\/span><\/strong> – <\/span>We found five instances of credentials leaking<\/span> in cleartext on Compute Instances,<\/span> due to insecure usage of open-source components and <\/span>insecure <\/span>system design of how <\/span>the environment was being provisioned.<\/span><\/span>\u00a0<\/span>
<\/span>\u00a0<\/span>
<\/span>M<\/span>LSee<\/span>:<\/span><\/strong> A vulnerability allowing <\/span>s<\/span>ensitive <\/span>i<\/span>nformation <\/span>d<\/span>isclosure<\/span><\/span> – <\/span>We found <\/span>a<\/span> case of exposed <\/span>APIs<\/span> in cloud middleware<\/span> leaking sensitive information<\/span> from Compute Instances<\/span>. The vulnerability <\/span>could be <\/span>l<\/span>everag<\/span>e<\/span>d<\/span> by <\/span>net<\/span>w<\/span>ork-adjacent <\/span>attackers <\/span>after <\/span>i<\/span>nitial<\/span> access<\/span> to laterally move<\/span> or snoop in on the commands executed using <\/span>Jupyter<\/span> termin<\/span>a<\/span>l<\/span> o<\/span>n <\/span>a Compute Instance<\/span>.<\/span><\/span>\u00a0<\/span>
<\/span>\u00a0<\/span>
<\/span>Achieving<\/span> P<\/span><\/strong>ersistence<\/strong> –\u00a0<\/span><\/span>While reversing cloud middleware to decipher their functionality, we found two ways to achieve persistence in AML environments. First, An attacker could fetch the Storage Account access key and the Azure AD JWT of the system-assigned managed identity assigned to the Compute Instance, even from non-Azure environments. <\/span>
<\/span>\u00a0<\/span>
<\/span>Through <\/span>this talk<\/span>, <\/span>the attendees <\/span>will<\/span> learn about the <\/span>different <\/span>issues that <\/span>w<\/span>ere <\/span>found in A<\/span>ML<\/span>, which may extend to other <\/span>Cloud-based <\/span>M<\/span>LaaS<\/span> platforms<\/span>.<\/span> A<\/span>s we take a <\/span>deep dive into the <\/span>security <\/span>issues<\/span>, w<\/span>e will<\/span> be <\/span>d<\/span>emonstrating<\/span> various <\/span>techniques <\/span>we <\/span>adopted while researching the service, giving the attendees a glimpse of how the security of managed services like AML can be assessed when there are blurred lines in the shared responsibility model…<\/span><\/span><\/p>\n

\n
<\/div>\n<\/div>\n","protected":false},"template":"","class_list":["post-10511","session","type-session","status-publish","hentry"],"acf":[],"yoast_head":"\nBreaking ML Services: Finding 0-days in Azure Machine Learning - HITBSecConf2023 - Phuket<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/session\/breaking-ml-services-finding-0-days-in-azure-machine-learning\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Breaking ML Services: Finding 0-days in Azure Machine Learning - HITBSecConf2023 - Phuket\" \/>\n<meta property=\"og:description\" content=\"Cloud service providers offer Machine–Learning–as–a–Service platforms, enabling companies to leverage the power of scalability & reliability while performing ML operations. With huge adoption of such systems worldwide, the security posture of the platform itself often may go unnoticed as it has been observed in previous research about vulnerabilities in Google\u2019s AI Hub and AWS\u2019s Sagemaker […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/session\/breaking-ml-services-finding-0-days-in-azure-machine-learning\/\" \/>\n<meta property=\"og:site_name\" content=\"HITBSecConf2023 - Phuket\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-23T02:23:26+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/session\/breaking-ml-services-finding-0-days-in-azure-machine-learning\/\",\"url\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/session\/breaking-ml-services-finding-0-days-in-azure-machine-learning\/\",\"name\":\"Breaking ML Services: Finding 0-days in Azure Machine Learning - HITBSecConf2023 - Phuket\",\"isPartOf\":{\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/#website\"},\"datePublished\":\"2022-07-07T07:26:06+00:00\",\"dateModified\":\"2023-08-23T02:23:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/session\/breaking-ml-services-finding-0-days-in-azure-machine-learning\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/session\/breaking-ml-services-finding-0-days-in-azure-machine-learning\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/session\/breaking-ml-services-finding-0-days-in-azure-machine-learning\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Session\",\"item\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/session\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Breaking ML Services: Finding 0-days in Azure Machine Learning\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/#website\",\"url\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/\",\"name\":\"HITBSecConf2023 - Phuket\",\"description\":\"August 22 - 26 @ InterContinental\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Breaking ML Services: Finding 0-days in Azure Machine Learning - HITBSecConf2023 - Phuket","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/session\/breaking-ml-services-finding-0-days-in-azure-machine-learning\/","og_locale":"en_US","og_type":"article","og_title":"Breaking ML Services: Finding 0-days in Azure Machine Learning - HITBSecConf2023 - Phuket","og_description":"Cloud service providers offer Machine–Learning–as–a–Service platforms, enabling companies to leverage the power of scalability & reliability while performing ML operations. With huge adoption of such systems worldwide, the security posture of the platform itself often may go unnoticed as it has been observed in previous research about vulnerabilities in Google\u2019s AI Hub and AWS\u2019s Sagemaker […]","og_url":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/session\/breaking-ml-services-finding-0-days-in-azure-machine-learning\/","og_site_name":"HITBSecConf2023 - Phuket","article_modified_time":"2023-08-23T02:23:26+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/session\/breaking-ml-services-finding-0-days-in-azure-machine-learning\/","url":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/session\/breaking-ml-services-finding-0-days-in-azure-machine-learning\/","name":"Breaking ML Services: Finding 0-days in Azure Machine Learning - HITBSecConf2023 - Phuket","isPartOf":{"@id":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/#website"},"datePublished":"2022-07-07T07:26:06+00:00","dateModified":"2023-08-23T02:23:26+00:00","breadcrumb":{"@id":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/session\/breaking-ml-services-finding-0-days-in-azure-machine-learning\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/session\/breaking-ml-services-finding-0-days-in-azure-machine-learning\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/session\/breaking-ml-services-finding-0-days-in-azure-machine-learning\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/"},{"@type":"ListItem","position":2,"name":"Session","item":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/session\/"},{"@type":"ListItem","position":3,"name":"Breaking ML Services: Finding 0-days in Azure Machine Learning"}]},{"@type":"WebSite","@id":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/#website","url":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/","name":"HITBSecConf2023 - Phuket","description":"August 22 - 26 @ InterContinental","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-json\/wp\/v2\/session\/10511"}],"collection":[{"href":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-json\/wp\/v2\/session"}],"about":[{"href":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-json\/wp\/v2\/types\/session"}],"wp:attachment":[{"href":"https:\/\/conference.hitb.org\/hitbsecconf2023hkt\/wp-json\/wp\/v2\/media?parent=10511"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}