20180120 spsbre - we are moving to the cloud what about security
•Descargar como PPTX, PDF•
1 recomendación•183 vistas
Presentation on SharePoint Saturday in Bremen on January 20, 2018
Recomendados
Recomendados
Más contenido relacionado
La actualidad más candente
La actualidad más candente (20)
Similar a 20180120 spsbre - we are moving to the cloud what about security
Similar a 20180120 spsbre - we are moving to the cloud what about security (20)
Más de Arjan Cornelissen
Más de Arjan Cornelissen (9)
Último
Último (20)
20180120 spsbre - we are moving to the cloud what about security
- 1. We are moving to the cloud, what about security
- 2. THANK YOU, SPONSORS! SHAREPOINT SATURDAY NORTH GERMANY 2018
- 3. Arjan Cornelisssen SharePoint & Office 365 Architect WorkTogether.tech @arjancornelis
- 4. How did we do security?
- 5. Sobering statistics The frequency and sophistication of cybersecurity attacks are escalating $6T annual cost of cybercrime to the global economy $4M average cost of a data breach to a company 140+ median # days attackers reside within a victim’s network before detection network intrusions due to compromised user credentials 75%+
- 6. Common passwords 1. 123456 2. 123456789 3. qwerty 4. 111111 5. 12345678 6. 123123 7. password 8. 1234567 9. 12345 10. 1234567890 11. abc123 12. 123 13. 123321 14. password1 15. qwertyuiop 16. 666666 17. a123456 18. 1234 19. 654321 20. 5201314 21. 123456a 22. iloveyou 23. 11111111 24. 159753 25. 123123123
- 7. Updated NIST Guidelines Three main changes: 1. No more periodic password changes 2. No more imposed password complexity 3. Validate new passwords against commonly used passwords http://aka.ms/passwordguidance Minimum Length Requirements (to defeat brute force hash attacks) Don’t use commonly attacked passwords Use unique passwords
- 11. Conditional Access Microsoft Cloud 3rd Party SaaS Apps On Premises Apps Microsoft Azure Prevent data leak Disable print Restrict download Enforce MFA Block sign-in Allow sign-in Access Control Session Restrictions OS Platform Is Compliant / Domain joined Is lost or stolen Device Risk Device User identity Group membership Session Risk User Mobile or Cloud app Per app policy App Location IP range Country / Region ApplicationsPolicy ControlsPolicy Conditions Windows Defender Azure AD Identity Protection Service Terms of Use Partners
- 12. IF Privileged user? Credentials found in public? Accessing sensitive app? Unmanaged device? Malware detected? IP detected in Botnet? Impossible travel? Anonymous client? High Medium Low User risk 10TB per day THEN Require MFA Allow access Deny access Force password reset****** Limit access High Medium Low Session risk Azure Bing OneDrive Microsoft Cyber Defense Operations Center Microsoft Cybercrime Center Xbox Live Microsoft Accounts Skype Risk-based conditional access
- 15. Demo
- 17. Windows 10 Hello
- 18. Access granted to data Microsoft Enterprise Mobility + Security Apps Risk MICROSOFT INTUNE AZURE ACTIVE DIRECTORY MICROSOFT CLOUD APP SECURITY AZURE INFORMATION PROTECTION MICROSOFT ADVANCED THREAT ANALYTICS ! Device ! CONDITIONAL ACCESS Location Classify Audit Protect Label ! !
- 19. Device and Application security
- 20. Microsoft Enterprise Mobility + Security Technology Benefit E3 E5 Azure Active Directory Premium P1 Secure single sign-on to cloud and on-premises app MFA, conditional access, and advanced security reporting ● ● Azure Active Directory Premium P2 Identity and access management with advanced protection for users and privileged identities ● Microsoft Intune Mobile device and app management to protect corporate apps and data on any device ● ● Azure Information Protection P1 Encryption for all files and storage locations Cloud-based file tracking ● ● Azure Information Protection P2 Intelligent classification and encryption for files shared inside and outside your organization ● Microsoft Cloud App Security Enterprise-grade visibility, control, and protection for your cloud applications ● Microsoft Advanced Threat Analytics Protection from advanced targeted attacks leveraging user and entity behavioral analytics ● ● Identity and access management Managed mobile productivity Information protection Threat Detection
- 21. Privileged Identity Management Enforce on-demand, just-in-time administrative access when needed Ensure policies are met with alerts, audit reports and access reviews Manage admins access in Azure AD and also in Azure RBAC User Administrator Discover, restrict, and monitor privileged identities UserAdministrator privileges expire after a specified interval
- 23. Demo
- 26. Azure monitoring
- 27. Our Security mindset needs to be updated
Notas del editor
- Eigen datacenter welke met dikke firewalls waren afgeschermd Alles in eigen beheer of door lokale partij uitbesteed
- Password Spray (aka Brute Force, Hammering) Complexiteit, expiration werkt niet. Medewerkers gebruiken zaken die te onthouden zijn. Sticky notes
- Nu gaan we naar de cloud, hoe zit het nu met security We verlaten ons fort en nu wie kan er allemaal bij?
- De medewerker wordt nu het centrale punt om te beveiligen
- 12
- Custom Controls
- Azure Domain join
- 18
- 20