Azure Container attacks and ToS

Question

Hello,
I'm currently planning my bachelor's thesis. My idea is to write and run some containerized apps and then try to exploit/attack them and see how particular security policies work and compare them. This leads to some questions.

1. Are there any Microsoft security policies that would prevent me from exploiting my virutal machine? For example would a DDoS attack be stopped by Microsoft's firewall?
2. Would my attack attempts be against Microsoft's Terms of Service?

Answer 1

Hello Michał Kuniczuk,

Thanks for your question.

There is a policy on permissible penetration testing. You can take a look at these guidelines to avoid violating terms of service. See:

https://www.microsoft.com/en-us/msrc/pentest-rules-of-engagement

Also see Service Agreements:

https://azure.microsoft.com/en-us/support/legal/

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola