Until recently, a vulnerability in Amazon Web Services
including the EC2 cloud allowed unauthorised users to perform
administrative tasks. At an ACM
workshop on cloud security, a team of researchers from Germany's
Ruhr University of Bochum led by professor Jörg Schwenk reported that attackers were, for example, able to start
and stop virtual machines, and create new images and gateways, in an EC2
instance.