book

Microsoft Azure Security Infrastructure

Name: Microsoft Azure Security Infrastructure
ISBN: 9781509304028

by Yuri Diogenes, Tom Shinder, Debra Shinder

August 2016

Intermediate to advanced

224 pages

6h 5m

English

Microsoft Press

Read now

Unlock full access

Cover
Title Page
Copyright Page
Contents
Foreword
Introduction
AcknowledgmentsFree ebooks from Microsoft PressErrata, updates, & book supportWe want to hear from youStay in touch
Chapter 1. Cloud security
Cloud security considerationsComplianceRisk managementIdentity and access managementOperational securityEndpoint protectionData protectionShared responsibilityCloud computingNIST definition of cloud computingCloud computing characteristicsCloud service modelsCloud deployment modelsDistributed responsibility in public cloud computingAssume breach and isolationAzure security architectureAzure design principles
Chapter 2. Identity protection in Azure
Authentication and authorizationAzure hierarchyRole-Based Access ControlOn-premises integrationAzure AD ConnectAzure AD Connect implementationFederationAD FS implementationSuspicious activity identificationIdentity protectionUser risk policySign-in risk policyNotification enablingVulnerabilitiesMulti-Factor AuthenticationAzure Multi-Factor Authentication implementationAzure Multi-Factor Authentication option configuration
Chapter 3. Azure network security
Anatomy of Azure networkingVirtual network infrastructureIP address schemeDHCP serversDNS serversNetwork access controlRouting tablesRemote access (Azure gateway/point-to-site VPN/RDP/Remote PowerShell/SSH)Remote Desktop ProtocolSecure Shell ProtocolSSTP-based point-to-site VPNCross-premises connectivitySite-to-site VPNDedicated WAN linkNetwork availabilityExternal load balancingInternal load balancingGlobal load balancingNetwork loggingPublic name resolutionNetwork security appliancesReverse proxyAzure Network Security best practicesSubnet your networks based on security zonesUse Network Security Groups carefullyUse site-to-site VPN to connect Azure Virtual NetworksConfigure host-based firewalls on IaaS virtual machinesConfigure User Defined Routes to control trafficRequire forced tunnelingDeploy virtual network security appliancesCreate perimeter networks for Internet-facing devicesUse ExpressRouteOptimize uptime and performanceHTTP-based load balancingExternal load balancingInternal load balancingGlobal load balancingDisable management protocols to virtual machinesEnable Azure Security CenterExtend your datacenter into Azure
Chapter 4. Data and storage security
Virtual machine encryptionAzure Disk EncryptionStorage encryptionFile share wire encryptionHybrid data encryptionAuthenticationWire securityData at restRights managementDatabase securityAzure SQL FirewallSQL Always EncryptedRow-level securityTransparent data encryptionCell-level encryptionDynamic data masking

Chapter 5. Virtual machine protection with Antimalware
Understanding the Antimalware solutionAntimalware deploymentAntimalware deployment to an existing VMAntimalware deployment to a new VMAntimalware removal
Chapter 6. Key management in Azure with Key Vault
Key Vault overviewApp configuration for Key VaultKey Vault event monitoring
Chapter 7. Azure resource management security
Azure Security Center overviewDetection capabilitiesOnboard resources in Azure Security CenterApply recommendationsResource security healthRespond to security incidents
Chapter 8. Internet of Things security
Anatomy of the IoTThings of the world, uniteSensors, sensors everywhereBig data just got bigger: TMIArtificial intelligence to the rescueIoT security challengesIoT: Insecure by designRamifications of an insecure IoTIoT threat modelingWindows 10 IoT and Azure IoTWindows 10 IoT editionsAzure IoT Suite and secure Azure IoT infrastructure
Chapter 9. Hybrid environment monitoring
Operations Management Suite Security and Audit solution overviewLog Analytics configurationWindows Agent installationResource monitoring using OMS Security and Audit solutionSecurity state monitoringIdentity and access controlAlerts and threats
Chapter 10. Operations and management in the cloud
ScenarioDesign considerationsAzure Security Center for operationsAzure Security Center for incident responseAzure Security Center for forensics investigation
Index
About the authors
Free ebooks
Survey
Code Snippets

Content preview from Microsoft Azure Security Infrastructure

Introduction

Regardless of your title, if you’re responsible for designing, configuring, implementing, or managing secure solutions in Microsoft Azure, then this book is for you. If you’re a member of a team responsible for architecting, designing, implementing, and managing secure solutions in Azure, this book will help you understand what your team needs to know. If you’re responsible for managing a consulting firm that is implementing secure solutions in Azure, you should read this book. And if you just want to learn more about Azure security to improve your skill set or aid in a job search, this book will help you understand Azure security services and technologies and how to best use them to better secure an Azure environment.

This book ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781509304028Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Microsoft Azure Security Infrastructure

by Yuri Diogenes, Tom Shinder, Debra Shinder

Introduction

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.