Security in windows azure

•

0 j'aime•531 vues

This session will explain at various levels how security is quaranteed. What are the responsibilities of the Cloud Provider (in this case Microsoft) and what responsibilities remain with the customers themselves? How are we save from evesdropping for sensitive information and portscanners? How compliant are the Microsoft Windows Azure datacenters? What does the Patriot Act mean, what is Safe Harbour and how does this impact the privacy of your data?

Technologie

Security in Windows Azure

Patriek van Dorp
Senior Technology Specialist Microsoft
Windows Azure MVP
Microsoft v-DPE and v-TSP for Windows Azure
Sogeti Netherlands
1

…but we don’t want to be…

…in over our heads

That’s why we start by...

…testing the water
temperature…

http://blogs.msdn.com/b/buckwoody/archive/2012/03/27/sql-azure-and-trust-services.aspx

ISO/IEC 27001:2005 PCI DSS
SAS 70 Type I and II FISMA
SOX …

Contenu connexe

En vedette

Windows security context

InGuen Hwang

Windows Security

Pooja Talreja

Nimbo/Alert Logic - Azure in the Cloud

Alert Logic

Azure Securtity Pro

John Horn

Deep thoughts from the real world of azure

Michele Leroux Bustamante

Azure vnet connectivity solutions

swapnilrkambli

Windows Azure Virtual Networks

Önder Değer

When companies endeavor to move their applications and services to the cloud, they tend to worry more about security up front. Interestingly, platforms such as Azure provide an even more secure environment than most self-managed co-location facilities can hope to offer, not to mention the plethora of features on the platform that help you secure your solutions end to end. In this session Michele will review the mini-avalanche that comprises Azure security across features. Taking the architect's view of the platform (with demos) she’ll cover best practices for securing Azure solutions end to end and discuss the tangential benefits of moving to Azure and how it can help you with checking the boxes on those pesky security surveys.

Design Practices for a Secure Azure Solution

Michele Leroux Bustamante

Windows azure sql_database_security_isug012013

sqlserver.co.il

Connect your datacenter to Microsoft Azure

K.Mohamed Faizal

Security @ Windows 10 Partner Technical Bootcamp Microsoft Norway October 2015

Jan Ketil Skanke

Microsoft Azure Security Infographic

Microsoft Azure

Azure Express Route

Mustafa

NTFS file system

Ravi Yasas

Security & protection in operating system

Abou Bakr Ashraf

Azure Operation Management Suite - security and compliance

Asaf Nakash

Network security

Gichelle Amon

If you are a Cloud Architect, Developer, IT Manager, Director or whoever may be, if you are associated with Azure or AWS cloud in some form, I’m sure you must have come across a common question. “What is the alternate service available in Azure or AWS vice versa and it’s pricing?” I’m sure you will say yes! Agreed, it’s hard to remember all the services offered by public clouds, i.e. Azure and AWS. Remembering existing services and their benefits itself is a big task, on top of that updating ourselves with the new feature releases and enhancements is another major task. So I put together a Service & Feature Mappings between Microsoft Azure & AWS for my and colleagues quick reference. I hope you also find this piece informative.

Microsoft Azure vs Amazon Web Services (AWS) Services & Feature Mapping

Ilyas F ☁☁☁

En vedette (18)

Windows security context

Windows Security

Nimbo/Alert Logic - Azure in the Cloud

Azure Securtity Pro

Deep thoughts from the real world of azure

Azure vnet connectivity solutions

Windows Azure Virtual Networks

Design Practices for a Secure Azure Solution

Windows azure sql_database_security_isug012013

Connect your datacenter to Microsoft Azure

Security @ Windows 10 Partner Technical Bootcamp Microsoft Norway October 2015

Microsoft Azure Security Infographic

Azure Express Route

NTFS file system

Security & protection in operating system

Azure Operation Management Suite - security and compliance

Network security

Microsoft Azure vs Amazon Web Services (AWS) Services & Feature Mapping

Similaire à Security in windows azure

Nate Warfield, Microsoft Ben Ridgway, Microsoft MongoDB, Redis, Elastic, Hadoop, SMBv1, IIS6.0, Samba. What do they all have in common? Thousands of them were pwned. In Azure. In 2017. Attackers have shifted tactics, leveraged nation-state leaked tools and are leveraging ransomware to monetize their attacks. Cloud networks are prime targets; the DMZ is gone, the firewall doesn't exist and customers may not realize they've exposed insecure services to the internet until it's too late. In this talk we'll discuss hunting, finding and remediating compromised customer systems in Azure - a non-trivial task with 1.59million exposed hosts and counting. Remediating system compromise is only the first stage so we'll also cover how we applied the lessons learned to proactively secure Azure Marketplace.

BlueHat v17 || All Your Cloud Are Belong to Us; Hunting Compromise in Azure

BlueHat Security Conference

Azure Sphere

Mirco Vanini

Azure Sphere

Mirco Vanini

A Throwaway Deck for Cloud Security Essentials 2.0 delivered at RSA 2016

Shannon Lietz

Why the cloud is more secure than your existing systems

Ernest Mueller

Session at ContainerDay Security 2023 on the 8th of March in Hamburg. Confidential computing is a relatively new technology that allows one to keep workloads encrypted and isolated in memory during processing. If used correctly, confidential computing can shield workloads from the underlying cloud. It's the first technology that effectively prevents data access from the cloud provider and its employees, co-tenants, and hackers coming through the infrastructure. Constellation (https://github.com/edgelesssys/constellation) is an open-source K8s distro/engine that applies the confidential-computing concept to entire K8s clusters. Constellation ensures that all data in the cluster is always encrypted - at rest, in transit, and at runtime. Constellation also provides hardware-rooted "whole cluster" attestation with which the integrity of a cluster can be verified remotely. (This process partly relies on the amazing Sigstore project.) Operations-wise, Constellation is very much vanilla K8s and should work with existing tooling. It's easy to set up and the security features are largely transparent to the DevOps engineer. To run, Constellation requires the availability of "Confidential VMs", which are available in Azure, GCP and elsewhere. In this talk, I'll give an introduction to confidential computing, discuss the motivation behind Constellation, discuss the exciting use cases, give an overview over its architecture, and show a demo.

Constellation - The first always encrypted Kubernetes by Moritz Eckert

ContainerDay Security 2023

Constellation - The first always encrypted Kubernetes by Moritz Eckert

ContainerDay Security 2023

Azure Sphere - GAB 2019

Mirco Vanini

Securing your Cloud Environment v2

ShapeBlue

SSL/TLS for Mortals (Voxxed Days Luxembourg)

Maarten Mulders

DevSecOps: Security With DevOps

Knoldus Inc.

"All happy cloud deployments are alike; each unhappy cloud deployment is unhappy in its own way." — Leo Tolstoy, Site Reliability Engineer At Gruntwork, I've had the chance to see the cloud adoption journeys of hundreds of companies, from tiny startups to Fortune 50 giants. I've seen those journeys go well. I've seen those journeys go poorly. In this talk, I discuss a few of the ways cloud adoption can go horribly wrong (massive cost overruns, endless death marches, security disasters), and more importantly, how you can get it right. To help you get it right, we looked at the cloud journeys that were successful and extracted from them the patterns they had in common. We distilled all this experience down into something called the Gruntwork Production Framework, which defines five concrete steps you can follow to adopt the cloud at your own company—and hopefully, to end up with your very own happy cloud deployment.

Cloud adoption fails - 5 ways deployments go wrong and 5 solutions

Yevgeniy Brikman

Defcon 18 "Hacking Electronic Door Access Controllers"

shawn_merdinger

Cloud Security Essentials 2.0 at RSA

Shannon Lietz

Internet of things at the Edge with Azure IoT Edge by sonujose

Sonu Jose

SOC Meets Cloud: What Breaks, What Changes, What to Do? originally presented at Mandiant mWise 2023 by Dr Anton Chuvakin of Google Cloud Office of the CISO Cloud changes everything (does it though?), including how we do threat detection and incident response in the SOC. As we continue to transform our attack surfaces, how do we make sure our detection and response are done "the cloud way"? There were also cases where both business and IT migrated to the cloud, but security was left behind and had to approach cloud challenges with on-premise tools and practices. How should a SOC born before cloud deal with cloud? What to watch for? What changes? What breaks? What stays the same?

SOC Meets Cloud: What Breaks, What Changes, What to Do?

Anton Chuvakin

Using SSL/TLS the right way is often a big hurdle for developers. We prefer to have that one colleague perform "something with certificates", because he/she knows how that works. But what if "that one colleague" is enjoying vacation and something goes wrong with the certificates? In this session we’ll take a close look at secure communication at the transport level. Starting with what exactly SSL and TLS is, we’ll dive into public/private keys, and signing. We’ll also learn what all this has to do with an unfortunate Dutch notary. Of course, there’ll be plenty of practical tips and tricks as well as demos. Attend this session to become "that one colleague"!

SSL/TLS for Mortals (JAX DE 2018)

Maarten Mulders

IoT Day - Introducing Azure Sphere

Mirco Vanini

Power edge carbonblack-security-0322Secure your workloads running on VMs and ...

Principled Technologies

What is this DevOps thing and why do I need it?

Safe Swiss Cloud

Similaire à Security in windows azure (20)

BlueHat v17 || All Your Cloud Are Belong to Us; Hunting Compromise in Azure

Azure Sphere

A Throwaway Deck for Cloud Security Essentials 2.0 delivered at RSA 2016

Why the cloud is more secure than your existing systems

Constellation - The first always encrypted Kubernetes by Moritz Eckert

Azure Sphere - GAB 2019

Securing your Cloud Environment v2

SSL/TLS for Mortals (Voxxed Days Luxembourg)

DevSecOps: Security With DevOps

Cloud adoption fails - 5 ways deployments go wrong and 5 solutions

Defcon 18 "Hacking Electronic Door Access Controllers"

Cloud Security Essentials 2.0 at RSA

Internet of things at the Edge with Azure IoT Edge by sonujose

SOC Meets Cloud: What Breaks, What Changes, What to Do?

SSL/TLS for Mortals (JAX DE 2018)

IoT Day - Introducing Azure Sphere

Power edge carbonblack-security-0322Secure your workloads running on VMs and ...

What is this DevOps thing and why do I need it?

Dernier

GenAI Risks & Security Meetup 01052024.pdf

lior mazor

Real Time Object Detection Using Open CV

Khem

Emergent Methods: Multi-lingual narrative tracking in the news - real-time ex...

Zilliz

Abhishek Deb(1), Mr Abdul Kalam(2) M. Des (UX) , School of Design, DIT University , Dehradun. This paper explores the future potential of AI-enabled smartphone processors, aiming to investigate the advancements, capabilities, and implications of integrating artificial intelligence (AI) into smartphone technology. The research study goals consist of evaluating the development of AI in mobile phone processors, analyzing the existing state as well as abilities of AI-enabled cpus determining future patterns as well as chances together with reviewing obstacles as well as factors to consider for more growth.

Exploring the Future Potential of AI-Enabled Smartphone Processors

debabhi2

Following the popularity of "Cloud Revolution: Exploring the New Wave of Serverless Spatial Data," we're thrilled to announce this much-anticipated encore webinar. In this sequel, we'll dive deeper into the Cloud-Native realm by uncovering practical applications and FME support for these new formats, including COGs, COPC, FlatGeoBuf, GeoParquet, STAC, and ZARR. Building on the foundation laid by industry leaders Michelle Roby of Radiant Earth and Chris Holmes of Planet in the first webinar, this second part offers an in-depth look at the real-world application and behind-the-scenes dynamics of these cutting-edge formats. We will spotlight specific use-cases and workflows, showcasing their efficiency and relevance in practical scenarios. Discover the vast possibilities each format holds, highlighted through detailed discussions and demonstrations. Our expert speakers will dissect the key aspects and provide critical takeaways for effective use, ensuring attendees leave with a thorough understanding of how to apply these formats in their own projects. Elevate your understanding of how FME supports these cutting-edge technologies, enhancing your ability to manage, share, and analyze spatial data. Whether you're building on knowledge from our initial session or are new to the serverless spatial data landscape, this webinar is your gateway to mastering cloud-native formats in your workflows.

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Safe Software

Three things you will take away from the session: • How to run an effective tenant-to-tenant migration • Best practices for before, during, and after migration • Tips for using migration as a springboard to prepare for Copilot in Microsoft 365 Main ideas: Migration Overview: The presentation covers the current reality of cross-tenant migrations, the triggers, phases, best practices, and benefits of a successful tenant migration Considerations: When considering a migration, it is important to consider the migration scope, performance, customization, flexibility, user-friendly interface, automation, monitoring, support, training, scalability, data integrity, data security, cost, and licensing structure Next Wave: The next wave of change includes the launch of Copilot, which requires businesses to be prepared for upcoming changes related to Copilot and the cloud, and to consolidate data and tighten governance ShareGate: ShareGate can help with pre-migration analysis, configurable migration tool, and automated, end-user driven collaborative governance

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

sammart93

Axa Assurance Maroc - Insurer Innovation Award 2024

The Digital Insurer

In the thrilling conclusion to 2023, ransomware groups had a banner year, really outdoing themselves in the "make everyone's life miserable" department. LockBit 3.0 took gold in the hacking olympics, followed by the plucky upstarts Clop and ALPHV/BlackCat. Apparently, 48% of organizations were feeling left out and decided to get in on the cyber attack action. Business services won the "most likely to get digitally mugged" award, with education and retail nipping at their heels. Hackers expanded their repertoire beyond boring old encryption to the much more exciting world of extortion. The US, UK and Canada took top honors in the "countries most likely to pay up" category. Bitcoins were the currency of choice for discerning hackers, because who doesn't love untraceable money?

Ransomware_Q4_2023. The report. [EN].pdf

Overkill Security

MySQL Webinar, presented on the 25th of April, 2024. Summary: MySQL solutions enable the deployment of diverse Database Architectures tailored to specific needs, including High Availability, Disaster Recovery, and Read Scale-Out. With MySQL Shell's AdminAPI, administrators can seamlessly set up, manage, and monitor these solutions, ensuring efficiency and ease of use in their administration. MySQL Router, on the other hand, provides transparent routing from the application traffic to the backend servers in the architectures, requiring minimal configuration. Completely built in-house and supported by Oracle, these solutions have been adopted by enterprises of all sizes for their business-critical applications. In this presentation, we'll delve into various database architecture solutions to help you choose the right one based on your business requirements. Focusing on technical details and the latest features to maximize the potential of these solutions.

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

Miguel Araújo

The value of a flexible API Management solution for Open Banking Steve Melan, Manager for IT Innovation and Architecture - State's and Saving's Bank of Luxembourg Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - The value of a flexible API Management solution for O...

apidays

The Good, the Bad and the Governed - Why is governance a dirty word? David O'Neill, Chief Operating Officer - APIContext Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

apidays

Corporate and higher education. Two industries that, in the past, have had a clear divide with very little crossover. The difference in goals, learning styles and objectives paved the way for differing learning technologies platforms to evolve. Now, those stark lines are blurring as both sides are discovering they have content that’s relevant to the other. Join Tammy Rutherford as she walks through the pros and cons of corporate and higher ed collaborating. And the challenges of these different technology platforms working together for a brighter future.

Corporate and higher education May webinar.pptx

Rustici Software

Architecting Cloud Native Applications

WSO2

This presentations targets students or working professionals. You may know Google for search, YouTube, Android, Chrome, and Gmail, but did you know Google has many developer tools, platforms & APIs? This comprehensive yet still high-level overview outlines the most impactful tools for where to run your code, store & analyze your data. It will also inspire you as to what's possible. This talk is 50 minutes in length.

Powerful Google developer tools for immediate impact! (2023-24 C)

wesley chun

Artificial Intelligence Chap.5 : Uncertainty

Khushali Kathiriya

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Martijn de Jong

Automating Google Workspace (GWS) & more with Apps Script

wesley chun

As privacy and data protection regulations evolve rapidly, organizations operating in multiple jurisdictions face mounting challenges to ensure compliance and safeguard customer data. With state-specific privacy laws coming up in multiple states this year, it is essential to understand what their unique data protection regulations will require clearly. How will data privacy evolve in the US in 2024? How to stay compliant? Our panellists will guide you through the intricacies of these states' specific data privacy laws, clarifying complex legal frameworks and compliance requirements. This webinar will review: - The essential aspects of each state's privacy landscape and the latest updates - Common compliance challenges faced by organizations operating in multiple states and best practices to achieve regulatory adherence - Valuable insights into potential changes to existing regulations and prepare your organization for the evolving landscape

TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments

TrustArc

ICT role in 21st century education and its challenges

rafiqahmad00786416

presentation ICT roal in 21st century education

jfdjdjcjdnsjd

Dernier (20)

GenAI Risks & Security Meetup 01052024.pdf

Real Time Object Detection Using Open CV

Emergent Methods: Multi-lingual narrative tracking in the news - real-time ex...

Exploring the Future Potential of AI-Enabled Smartphone Processors

Cloud Frontiers: A Deep Dive into Serverless Spatial Data and FME

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

Axa Assurance Maroc - Insurer Innovation Award 2024

Ransomware_Q4_2023. The report. [EN].pdf

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

Apidays New York 2024 - The value of a flexible API Management solution for O...

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

Corporate and higher education May webinar.pptx

Architecting Cloud Native Applications

Powerful Google developer tools for immediate impact! (2023-24 C)

Artificial Intelligence Chap.5 : Uncertainty

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Automating Google Workspace (GWS) & more with Apps Script

TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments

ICT role in 21st century education and its challenges

presentation ICT roal in 21st century education

Security in windows azure

1. Security in Windows Azure Patriek van Dorp Senior Technology Specialist Microsoft Windows Azure MVP Microsoft v-DPE and v-TSP for Windows Azure Sogeti Netherlands 1

2. We’re all excited about the Cloud…

3. We all want to catch this wave…

6. …but we don’t want to be… …in over our heads

7. …because things can go wrong…

8. …terribly wrong

9. Cloud Computing seems terrifying

10. That’s why we start by... …testing the water temperature…

11. …to see if it’s right for us

12.

13.

14.

15.