book

Microsoft Azure Security Infrastructure

Name: Microsoft Azure Security Infrastructure
ISBN: 9781509304028

by Yuri Diogenes, Tom Shinder, Debra Shinder

August 2016

Intermediate to advanced

224 pages

6h 5m

English

Microsoft Press

Read now

Unlock full access

Cover
Title Page
Copyright Page
Contents
Foreword
Introduction
AcknowledgmentsFree ebooks from Microsoft PressErrata, updates, & book supportWe want to hear from youStay in touch
Chapter 1. Cloud security
Cloud security considerationsComplianceRisk managementIdentity and access managementOperational securityEndpoint protectionData protectionShared responsibilityCloud computingNIST definition of cloud computingCloud computing characteristicsCloud service modelsCloud deployment modelsDistributed responsibility in public cloud computingAssume breach and isolationAzure security architectureAzure design principles
Chapter 2. Identity protection in Azure
Authentication and authorizationAzure hierarchyRole-Based Access ControlOn-premises integrationAzure AD ConnectAzure AD Connect implementationFederationAD FS implementationSuspicious activity identificationIdentity protectionUser risk policySign-in risk policyNotification enablingVulnerabilitiesMulti-Factor AuthenticationAzure Multi-Factor Authentication implementationAzure Multi-Factor Authentication option configuration
Chapter 3. Azure network security
Anatomy of Azure networkingVirtual network infrastructureIP address schemeDHCP serversDNS serversNetwork access controlRouting tablesRemote access (Azure gateway/point-to-site VPN/RDP/Remote PowerShell/SSH)Remote Desktop ProtocolSecure Shell ProtocolSSTP-based point-to-site VPNCross-premises connectivitySite-to-site VPNDedicated WAN linkNetwork availabilityExternal load balancingInternal load balancingGlobal load balancingNetwork loggingPublic name resolutionNetwork security appliancesReverse proxyAzure Network Security best practicesSubnet your networks based on security zonesUse Network Security Groups carefullyUse site-to-site VPN to connect Azure Virtual NetworksConfigure host-based firewalls on IaaS virtual machinesConfigure User Defined Routes to control trafficRequire forced tunnelingDeploy virtual network security appliancesCreate perimeter networks for Internet-facing devicesUse ExpressRouteOptimize uptime and performanceHTTP-based load balancingExternal load balancingInternal load balancingGlobal load balancingDisable management protocols to virtual machinesEnable Azure Security CenterExtend your datacenter into Azure
Chapter 4. Data and storage security
Virtual machine encryptionAzure Disk EncryptionStorage encryptionFile share wire encryptionHybrid data encryptionAuthenticationWire securityData at restRights managementDatabase securityAzure SQL FirewallSQL Always EncryptedRow-level securityTransparent data encryptionCell-level encryptionDynamic data masking

Chapter 5. Virtual machine protection with Antimalware
Understanding the Antimalware solutionAntimalware deploymentAntimalware deployment to an existing VMAntimalware deployment to a new VMAntimalware removal
Chapter 6. Key management in Azure with Key Vault
Key Vault overviewApp configuration for Key VaultKey Vault event monitoring
Chapter 7. Azure resource management security
Azure Security Center overviewDetection capabilitiesOnboard resources in Azure Security CenterApply recommendationsResource security healthRespond to security incidents
Chapter 8. Internet of Things security
Anatomy of the IoTThings of the world, uniteSensors, sensors everywhereBig data just got bigger: TMIArtificial intelligence to the rescueIoT security challengesIoT: Insecure by designRamifications of an insecure IoTIoT threat modelingWindows 10 IoT and Azure IoTWindows 10 IoT editionsAzure IoT Suite and secure Azure IoT infrastructure
Chapter 9. Hybrid environment monitoring
Operations Management Suite Security and Audit solution overviewLog Analytics configurationWindows Agent installationResource monitoring using OMS Security and Audit solutionSecurity state monitoringIdentity and access controlAlerts and threats
Chapter 10. Operations and management in the cloud
ScenarioDesign considerationsAzure Security Center for operationsAzure Security Center for incident responseAzure Security Center for forensics investigation
Index
About the authors
Free ebooks
Survey
Code Snippets

Content preview from Microsoft Azure Security Infrastructure

Chapter 6. Key management in Azure with Key Vault

As explained in Chapter 4, “Data and storage security,” data encryption is important regardless of where your data is located. However, when planning to adopt data encryption, you should also plan how to manage the encryption keys because if the keys are compromised, the data is no longer secure. In the cloud, you can take advantage of the Microsoft Azure Key Vault service to safeguard cryptographic keys and other secrets used by cloud apps and services. This chapter explains in more detail how Key Vault works and how to implement it.

Key Vault overview

Organizations migrating to the cloud should keep control of their data’s security, and one of the primary elements of data security is encryption. ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781509304028Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Microsoft Azure Security Infrastructure

by Yuri Diogenes, Tom Shinder, Debra Shinder