Security in windows azure

•

0 recomendaciones•531 vistas

This session will explain at various levels how security is quaranteed. What are the responsibilities of the Cloud Provider (in this case Microsoft) and what responsibilities remain with the customers themselves? How are we save from evesdropping for sensitive information and portscanners? How compliant are the Microsoft Windows Azure datacenters? What does the Patriot Act mean, what is Safe Harbour and how does this impact the privacy of your data?

Tecnología

Security in Windows Azure

Patriek van Dorp
Senior Technology Specialist Microsoft
Windows Azure MVP
Microsoft v-DPE and v-TSP for Windows Azure
Sogeti Netherlands
1

…but we don’t want to be…

…in over our heads

That’s why we start by...

…testing the water
temperature…

http://blogs.msdn.com/b/buckwoody/archive/2012/03/27/sql-azure-and-trust-services.aspx

ISO/IEC 27001:2005 PCI DSS
SAS 70 Type I and II FISMA
SOX …

Más contenido relacionado

Destacado

Windows security context

InGuen Hwang

Windows Security

Pooja Talreja

Nimbo/Alert Logic - Azure in the Cloud

Alert Logic

Azure Securtity Pro

John Horn

Deep thoughts from the real world of azure

Michele Leroux Bustamante

Azure vnet connectivity solutions

swapnilrkambli

Windows Azure Virtual Networks

Önder Değer

When companies endeavor to move their applications and services to the cloud, they tend to worry more about security up front. Interestingly, platforms such as Azure provide an even more secure environment than most self-managed co-location facilities can hope to offer, not to mention the plethora of features on the platform that help you secure your solutions end to end. In this session Michele will review the mini-avalanche that comprises Azure security across features. Taking the architect's view of the platform (with demos) she’ll cover best practices for securing Azure solutions end to end and discuss the tangential benefits of moving to Azure and how it can help you with checking the boxes on those pesky security surveys.

Design Practices for a Secure Azure Solution

Michele Leroux Bustamante

Windows azure sql_database_security_isug012013

sqlserver.co.il

Connect your datacenter to Microsoft Azure

K.Mohamed Faizal

Security @ Windows 10 Partner Technical Bootcamp Microsoft Norway October 2015

Jan Ketil Skanke

Microsoft Azure Security Infographic

Microsoft Azure

Azure Express Route

Mustafa

NTFS file system

Ravi Yasas

Security & protection in operating system

Abou Bakr Ashraf

Azure Operation Management Suite - security and compliance

Asaf Nakash

Network security

Gichelle Amon

If you are a Cloud Architect, Developer, IT Manager, Director or whoever may be, if you are associated with Azure or AWS cloud in some form, I’m sure you must have come across a common question. “What is the alternate service available in Azure or AWS vice versa and it’s pricing?” I’m sure you will say yes! Agreed, it’s hard to remember all the services offered by public clouds, i.e. Azure and AWS. Remembering existing services and their benefits itself is a big task, on top of that updating ourselves with the new feature releases and enhancements is another major task. So I put together a Service & Feature Mappings between Microsoft Azure & AWS for my and colleagues quick reference. I hope you also find this piece informative.

Microsoft Azure vs Amazon Web Services (AWS) Services & Feature Mapping

Ilyas F ☁☁☁

Destacado (18)

Windows security context

Windows Security

Nimbo/Alert Logic - Azure in the Cloud

Azure Securtity Pro

Deep thoughts from the real world of azure

Azure vnet connectivity solutions

Windows Azure Virtual Networks

Design Practices for a Secure Azure Solution

Windows azure sql_database_security_isug012013

Connect your datacenter to Microsoft Azure

Security @ Windows 10 Partner Technical Bootcamp Microsoft Norway October 2015

Microsoft Azure Security Infographic

Azure Express Route

NTFS file system

Security & protection in operating system

Azure Operation Management Suite - security and compliance

Network security

Microsoft Azure vs Amazon Web Services (AWS) Services & Feature Mapping

Similar a Security in windows azure

Nate Warfield, Microsoft Ben Ridgway, Microsoft MongoDB, Redis, Elastic, Hadoop, SMBv1, IIS6.0, Samba. What do they all have in common? Thousands of them were pwned. In Azure. In 2017. Attackers have shifted tactics, leveraged nation-state leaked tools and are leveraging ransomware to monetize their attacks. Cloud networks are prime targets; the DMZ is gone, the firewall doesn't exist and customers may not realize they've exposed insecure services to the internet until it's too late. In this talk we'll discuss hunting, finding and remediating compromised customer systems in Azure - a non-trivial task with 1.59million exposed hosts and counting. Remediating system compromise is only the first stage so we'll also cover how we applied the lessons learned to proactively secure Azure Marketplace.

BlueHat v17 || All Your Cloud Are Belong to Us; Hunting Compromise in Azure

BlueHat Security Conference

Azure Sphere

Mirco Vanini

Azure Sphere

Mirco Vanini

A Throwaway Deck for Cloud Security Essentials 2.0 delivered at RSA 2016

Shannon Lietz

Why the cloud is more secure than your existing systems

Ernest Mueller

Session at ContainerDay Security 2023 on the 8th of March in Hamburg. Confidential computing is a relatively new technology that allows one to keep workloads encrypted and isolated in memory during processing. If used correctly, confidential computing can shield workloads from the underlying cloud. It's the first technology that effectively prevents data access from the cloud provider and its employees, co-tenants, and hackers coming through the infrastructure. Constellation (https://github.com/edgelesssys/constellation) is an open-source K8s distro/engine that applies the confidential-computing concept to entire K8s clusters. Constellation ensures that all data in the cluster is always encrypted - at rest, in transit, and at runtime. Constellation also provides hardware-rooted "whole cluster" attestation with which the integrity of a cluster can be verified remotely. (This process partly relies on the amazing Sigstore project.) Operations-wise, Constellation is very much vanilla K8s and should work with existing tooling. It's easy to set up and the security features are largely transparent to the DevOps engineer. To run, Constellation requires the availability of "Confidential VMs", which are available in Azure, GCP and elsewhere. In this talk, I'll give an introduction to confidential computing, discuss the motivation behind Constellation, discuss the exciting use cases, give an overview over its architecture, and show a demo.

Constellation - The first always encrypted Kubernetes by Moritz Eckert

ContainerDay Security 2023

Constellation - The first always encrypted Kubernetes by Moritz Eckert

ContainerDay Security 2023

Azure Sphere - GAB 2019

Mirco Vanini

Securing your Cloud Environment v2

ShapeBlue

SSL/TLS for Mortals (Voxxed Days Luxembourg)

Maarten Mulders

DevSecOps: Security With DevOps

Knoldus Inc.

"All happy cloud deployments are alike; each unhappy cloud deployment is unhappy in its own way." — Leo Tolstoy, Site Reliability Engineer At Gruntwork, I've had the chance to see the cloud adoption journeys of hundreds of companies, from tiny startups to Fortune 50 giants. I've seen those journeys go well. I've seen those journeys go poorly. In this talk, I discuss a few of the ways cloud adoption can go horribly wrong (massive cost overruns, endless death marches, security disasters), and more importantly, how you can get it right. To help you get it right, we looked at the cloud journeys that were successful and extracted from them the patterns they had in common. We distilled all this experience down into something called the Gruntwork Production Framework, which defines five concrete steps you can follow to adopt the cloud at your own company—and hopefully, to end up with your very own happy cloud deployment.

Cloud adoption fails - 5 ways deployments go wrong and 5 solutions

Yevgeniy Brikman

Defcon 18 "Hacking Electronic Door Access Controllers"

shawn_merdinger

Cloud Security Essentials 2.0 at RSA

Shannon Lietz

Internet of things at the Edge with Azure IoT Edge by sonujose

Sonu Jose

SOC Meets Cloud: What Breaks, What Changes, What to Do? originally presented at Mandiant mWise 2023 by Dr Anton Chuvakin of Google Cloud Office of the CISO Cloud changes everything (does it though?), including how we do threat detection and incident response in the SOC. As we continue to transform our attack surfaces, how do we make sure our detection and response are done "the cloud way"? There were also cases where both business and IT migrated to the cloud, but security was left behind and had to approach cloud challenges with on-premise tools and practices. How should a SOC born before cloud deal with cloud? What to watch for? What changes? What breaks? What stays the same?

SOC Meets Cloud: What Breaks, What Changes, What to Do?

Anton Chuvakin

Using SSL/TLS the right way is often a big hurdle for developers. We prefer to have that one colleague perform "something with certificates", because he/she knows how that works. But what if "that one colleague" is enjoying vacation and something goes wrong with the certificates? In this session we’ll take a close look at secure communication at the transport level. Starting with what exactly SSL and TLS is, we’ll dive into public/private keys, and signing. We’ll also learn what all this has to do with an unfortunate Dutch notary. Of course, there’ll be plenty of practical tips and tricks as well as demos. Attend this session to become "that one colleague"!

SSL/TLS for Mortals (JAX DE 2018)

Maarten Mulders

IoT Day - Introducing Azure Sphere

Mirco Vanini

Power edge carbonblack-security-0322Secure your workloads running on VMs and ...

Principled Technologies

What is this DevOps thing and why do I need it?

Safe Swiss Cloud

Similar a Security in windows azure (20)

BlueHat v17 || All Your Cloud Are Belong to Us; Hunting Compromise in Azure

Azure Sphere

A Throwaway Deck for Cloud Security Essentials 2.0 delivered at RSA 2016

Why the cloud is more secure than your existing systems

Constellation - The first always encrypted Kubernetes by Moritz Eckert

Azure Sphere - GAB 2019

Securing your Cloud Environment v2

SSL/TLS for Mortals (Voxxed Days Luxembourg)

DevSecOps: Security With DevOps

Cloud adoption fails - 5 ways deployments go wrong and 5 solutions

Defcon 18 "Hacking Electronic Door Access Controllers"

Cloud Security Essentials 2.0 at RSA

Internet of things at the Edge with Azure IoT Edge by sonujose

SOC Meets Cloud: What Breaks, What Changes, What to Do?

SSL/TLS for Mortals (JAX DE 2018)

IoT Day - Introducing Azure Sphere

Power edge carbonblack-security-0322Secure your workloads running on VMs and ...

What is this DevOps thing and why do I need it?

Último

Ever caught yourself nodding along when someone mentions "delivering value" in Agile, but secretly wondering what the heck they actually mean? You're not alone! Join us for an eye-opening session where we'll strip away the buzzwords and dive into the heart of Agile—value delivery. But what is "value"? Is it a mythical unicorn in the world of software development, or is there more to this overused term? This isn't going to be a sit-and-get lecture. We're talking about a face-to-face, interactive meetup where YOU play a crucial role. Come along to: Define It: What does "value" really mean? We’ll build a definition that’s not just words, but a compass for your Agile journey. Contextualise It: Discover what value means specifically to you, your team, your company, and your industry. Because one size does not fit all. Deliver It: Share strategies and gather new ones for uncovering and delivering true value—no more shooting in the dark!

Unpacking Value Delivery - Agile Oxford Meetup - May 2024.pptx

David Michel

New customer? New industry? New cloud? New team? A lot to handle! How to ensure the success of the project? Start it well! I've created the 3 areas of focus at the beginning of the project that helped me in multiple roles (BA, PO, and Consultant). Learn from real-world experiences and discover how these insights can empower you to deliver unparalleled value to your customers right from the project's start.

Powerful Start- the Key to Project Success, Barbara Laskowska

CzechDreamin

The Epson EcoTank L3210 is a high-performance and cost-efficient printer designed to meet the printing needs of both home users and small businesses. Equipped with Epson’s revolutionary EcoTank ink tank system, the Epson eliminates the need for traditional ink cartridges, thereby significantly reducing printing costs and plastic waste. With its PrecisionCore technology, this printer delivers sharp, vibrant prints for both documents and photos. Its user-friendly design ensures easy setup and operation, while its compact form factor saves valuable desk space. Whether it’s everyday printing jobs or creative projects, the Epson EcoTank L3210 provides a reliable and eco-friendly printing solution.

Buy Epson EcoTank L3210 Colour Printer Online.pptx

EasyPrinterHelp

I'm excited to share my latest predictions on how AI, robotics, and other technological advancements will reshape industries in the coming years. The slides explore the exponential growth of computational power, the future of AI and robotics, and their profound impact on various sectors. Why this matters: The success of new products and investments hinges on precise timing and foresight into emerging categories. This deck equips founders, VCs, and industry leaders with insights to align future products with upcoming tech developments. These insights enhance the ability to forecast industry trends, improve market timing, and predict competitor actions. Highlights: ▪ Exponential Growth in Compute: How $1000 will soon buy the computational power of a human brain ▪ Scaling of AI Models: The journey towards beyond human-scale models and intelligent edge computing ▪ Transformative Technologies: From advanced robotics and brain interfaces to automated healthcare and beyond ▪ Future of Work: How automation will redefine jobs and economic structures by 2040 With so many predictions presented here, some will inevitably be wrong or mistimed, especially with potential external disruptions. For instance, a conflict in Taiwan could severely impact global semiconductor production, affecting compute costs and related advancements. Nonetheless, these slides are intended to guide intuition on future technological trends.

Future Visions: Predictions to Guide and Time Tech Innovation, Peter Udo Diehl

Peter Udo Diehl

Measures in SQL (a talk at SF Distributed Systems meetup, 2024-05-22)

Julian Hyde

ScyllaDB has the potential to deliver impressive performance and scalability. The better you understand how it works, the more you can squeeze out of it. But before you squeeze, make sure you know what to monitor! Watch our experienced Postgres developer work through monitoring and performance strategies that help him understand what mistakes he’s made moving to NoSQL. And learn with him as our database performance expert offers friendly guidance on how to use monitoring and performance tuning to get his sample Rust application on the right track. This webinar focuses on using monitoring and performance tuning to discover and correct mistakes that commonly occur when developers move from SQL to NoSQL. For example: - Common issues getting up and running with the monitoring stack - Using the CQL optimizations dashboard - Common issues causing high latency in a node - Common issues causing replica imbalance - What a healthy system looks like in terms of memory - Key metrics to keep an eye on This isn’t “Death-by-Powerpoint.” We’ll walk through problems encountered while migrating a real application from Postgres to ScyllaDB – and try to fix them live as well.

Optimizing NoSQL Performance Through Observability

ScyllaDB

In this session, we will showcase how to revolutionize automated testing for your software, automation, and QA teams with UiPath Test Suite. In part 1 of UiPath test automation using UiPath Test Suite – developer series, we will cover, Software testing overview What is software testing Why software testing is required Typical test types and levels Continuous testing and challenges Introduction to UiPath Test Suite UiPath Test Suite family of products Speaker: Atul Trikha, Chief Technologist & Solutions Architect, Peraton and UiPath MVP Deepak Rai, Automation Practice Lead, Boundaryless Group and UiPath MVP

UiPath Test Automation using UiPath Test Suite series, part 1

DianaGray10

Agentic RAG What it is its types applications and implementation.pdf

ChristopherTHyatt

This talk offers actionable insights at an executive level for enhancing productivity and refining your portfolio management approach to propel your organization to greater heights. Key Points Covered: 1. Experience Transformation: - The core challenge remains consistent across organizations: converting budget into user-centric designs. - Strategies for deploying design resources effectively in both startups and large enterprises. 2. Strategic Frameworks: - Introduction to the "Ziggurat of Impact" model, detailing layers from basic system interactions to comprehensive customer experiences. - Practical insights on creating frameworks that scale with organizational complexity. 3. Organizational Impact: - Real-world examples of navigating design in large settings, focusing on the synthesis of consumer products and customer experiences. - Emphasis on the importance of designing systems that directly influence customer interactions. 4. Design Execution: - Detailed walkthrough of organizational layers affecting design execution, from touchpoints and customer activities to shared capabilities. - How to ensure design influences both the micro and macro aspects of customer interactions. 5. Measurement and Adaptation: - Techniques for measuring the impact of design decisions and adapting strategies based on data-driven insights. - The critical role of continuous improvement and feedback in refining customer experiences.

Structuring Teams and Portfolios for Success

UXDXConf

The standard Salesforce Approval process can be limiting in many ways, especially in complex scenarios. What if there was a way to implement very flexible approvals where one can use Apex code to make data updates in unrelated records, dynamically generate next steps details, and compute assignees on the fly? And still use UI-based configurations to implement concrete approval processes. In this session, we will share ideas behind such a solution and show a few lines of code to get you started.

Custom Approval Process: A New Perspective, Pavel Hrbacek & Anindya Halder

CzechDreamin

Syngulon’s technology expands the capacity for selection of microorganisms. The ability to select individual microbes with a behavior of interest is essential, whether for simple cloning at the bench, or for industry-scale production. Synthetic biology uses the concept of “bioengineering” to improve or modify existing genetic systems to create microbes with desired behaviors, and Syngulon uses this approach to develop its selection technologies. This selection technology is based on bacteriocins, ribosomally-produced peptides naturally made by most bacteria to kill competitive microbial species. These bacteriocins can have a limited or wide target range against other microbial species. This technology offers advantageous over antibiotic selection for several reasons: it avoids the use of antibiotics in the first place, helping to reduce the spread of antibiotic resistant microbes. The technology also increases product yield; as bacteriocins are generally smaller peptides, they do not impose a heavy metabolic burden on the producing cell. They can have a wide target specificity, helping to avoid genetic drift. Finally, our system is 100% plasmid-based (e.g. without chromosomal mutations), making it applicable for use in any E. coli strains.

Syngulon - Selection technology May 2024.pdf

Syngulon

We're living the AI revolution and Salesforce is adapting and bring new value to their customers. Einstein products are evolving rapidly and navigating their limitations, language support, and use cases can be challenging. Let's make review of what Einstein product are available currently, what are the capabilities and what can be used for in CEE region and how Rossie.ai can help to learn Salesforce speak Czech. We will explore the Einstein roadmap and I will make a short live demo (based on your vote) of some Einstein feature.

AI revolution and Salesforce, Jiří Karpíšek

CzechDreamin

Screen flow is a powerful automation tool that is commonly designed for internal and external users. However, what about the guest users? We will dive into various methods of launching screen flows and understand how to make them publicly accessible, extending their usability to a broader audience. The presentation will also cover the implementation of security layers and highlight best practices for a smooth and protected user experience. Discover the potential of screen flows beyond conventional use and learn how to leverage them effectively.

Free and Effective: Making Flows Publicly Accessible, Yumi Ibrahimzade

CzechDreamin

Where to Learn More About FDO _ Richard at FIDO Alliance.pdf

FIDO Alliance

WSO2CONMay2024OpenSourceConferenceDebrief.pptx

Jennifer Lim

PLAI - Acceleration Program for Generative A.I. Startups

Stefano

Explore the core of Salesforce success in 'Salesforce Adoption – Metrics, Methods, and Motivation.' We will discuss essential metrics, effective methods to drive adoption, and the driving force behind user engagement and explore strategies for onboarding, training, and continuous support that empower users to navigate the platform seamlessly. By leveraging these tools, you can effectively measure adoption against your company’s goals and create an environment where users not only adopt Salesforce but actively contribute to its ongoing success.

Salesforce Adoption – Metrics, Methods, and Motivation, Antone Kom

CzechDreamin

Linux Foundation Edge _ Overview of FDO Software Components _ Randy at Intel.pdf

FIDO Alliance

Welcome to UiPath Test Automation using UiPath Test Suite series part 2. In this session, we will cover API test automation along with a web automation demo. Topics covered: Test Automation introduction API Example of API automation Web automation demonstration Speaker Pathrudu Chintakayala, Associate Technical Architect @Yash and UiPath MVP Deepak Rai, Automation Practice Lead, Boundaryless Group and UiPath MVP

UiPath Test Automation using UiPath Test Suite series, part 2

DianaGray10

This presentation dives into the practical applications of machine learning within Google's operations, providing a comprehensive overview of how to leverage AI technologies to solve real-world business challenges. Key Points Covered: - Introduction to Machine Learning at Google: Discussion on the role of ML and its evolution in enhancing Google's operational efficiency. - Experience Sharing: Insights into the team's long-term engagement with machine learning projects and the impacts on Google’s operational strategies. - Practical Applications: Real-world examples of ML applications within Google’s daily operations, providing a blueprint to adapt similar strategies. - Challenges and Solutions: Discussion on the challenges faced during the implementation of ML projects and the strategic solutions employed to overcome them. - Future of ML at Google: Insights into future trends in machine learning at Google and how they plan to continue integrating AI into their ecosystem.

Strategic AI Integration in Engineering Teams

UXDXConf

Security in windows azure

1. Security in Windows Azure Patriek van Dorp Senior Technology Specialist Microsoft Windows Azure MVP Microsoft v-DPE and v-TSP for Windows Azure Sogeti Netherlands 1

2. We’re all excited about the Cloud…

3. We all want to catch this wave…

6. …but we don’t want to be… …in over our heads

7. …because things can go wrong…

8. …terribly wrong

9. Cloud Computing seems terrifying

10. That’s why we start by... …testing the water temperature…

11. …to see if it’s right for us

12.

13.

14.

15.