am i violating Azure TOS if i perform the above?

YESSSSSSS https://video2.skills-academy.com/en-gb/azure/security/fundamentals/pen-testing states clearly "One type of pen test that you can’t perform is any kind of Denial of Service (DoS) attack. This test includes initiating a DoS attack itself, or performing related tests that might determine, demonstrate, or simulate any type of DoS attack."

scenario: DDos simulation but both attacking and target VMs are owned by 1 subscriber

Accepted answer

Oscar Maqueda 611 Reputation points Microsoft Employee

2021-01-06T13:09:39.86+00:00

YESSSSSSS https://video2.skills-academy.com/en-gb/azure/security/fundamentals/pen-testing

states clearly

"One type of pen test that you can’t perform is any kind of Denial of Service (DoS) attack. This test includes initiating a DoS attack itself, or performing related tests that might determine, demonstrate, or simulate any type of DoS attack."
Please sign in to rate this answer.
Enrique Empuerto III 21 Reputation points

2021-01-06T13:41:54.59+00:00

thank you for your quick and informative reply.

but just wondering shouldn't there be some protocol for developers to perform this type of activity since both VMs are owned by the same subscriber and is just using internal bandwidth? i feel that when DDos simulation is just done on a local network it becomes an unreliable/unrealistic gauge as to how the actual Azure VM would fare in a simulated attack.

P.S. im aware of breakpoint cloud (MS suggested partner for DDos simulation) but my use case is purely a DIY DDos simulation using a regular Azure VM
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

scenario: DDos simulation but both attacking and target VMs are owned by 1 subscriber

0 additional answers

Your answer