Transcript
Page 1: Assume breach, layered security in Azure tested and ......StorSimple Encrypted Hybrid Storage Azure Client Side Encryption Azure Storage SAS Azure Storage Account Keys Azure File Shares

AZURE

Assume breach, layered security in Azure tested and explained

Martyn Coupland@mrcoups

Page 2: Assume breach, layered security in Azure tested and ......StorSimple Encrypted Hybrid Storage Azure Client Side Encryption Azure Storage SAS Azure Storage Account Keys Azure File Shares

AZURE

Martyn Coupland

theazureguy.wordpress.com

@mrcoups

Page 3: Assume breach, layered security in Azure tested and ......StorSimple Encrypted Hybrid Storage Azure Client Side Encryption Azure Storage SAS Azure Storage Account Keys Azure File Shares

AZURE Session agenda• Security poll - http://etc.ch/sJ4m• The truth about security• Demos

Page 4: Assume breach, layered security in Azure tested and ......StorSimple Encrypted Hybrid Storage Azure Client Side Encryption Azure Storage SAS Azure Storage Account Keys Azure File Shares

AZURE

Page 5: Assume breach, layered security in Azure tested and ......StorSimple Encrypted Hybrid Storage Azure Client Side Encryption Azure Storage SAS Azure Storage Account Keys Azure File Shares

AZURE The truth about security• How do breaches occur?• What is common about breaches?

Page 6: Assume breach, layered security in Azure tested and ......StorSimple Encrypted Hybrid Storage Azure Client Side Encryption Azure Storage SAS Azure Storage Account Keys Azure File Shares

AZURE What can we learn?• 97% of breaches were avoidable• Get the simple things right• Invest in notification and discovery• Find out before the outside world!

Page 7: Assume breach, layered security in Azure tested and ......StorSimple Encrypted Hybrid Storage Azure Client Side Encryption Azure Storage SAS Azure Storage Account Keys Azure File Shares

AZURE The Azure Security Stack

Platform

Policy Role Based Access

Resources Settings

EdgeVendor

You

Vendor + You

Page 8: Assume breach, layered security in Azure tested and ......StorSimple Encrypted Hybrid Storage Azure Client Side Encryption Azure Storage SAS Azure Storage Account Keys Azure File Shares

AZURE Which product?Azure Security Center

Azure Key Vault

Log AnalyticsAzure Storage Encryption Service

Azure Dev/Test Labs

StorSimple Encrypted Hybrid StorageAzure Client Side Encryption

Azure Storage SAS

Azure Storage Account Keys

Azure File Shares

Azure Storage Analytics

Azure SQL Firewall

Cell Level Encryption

Transparent Data Encryption

Database Auditing

Role Based Access ControlMulti-Factor Authentication

Network Security GroupsApplication Gateway

Load Balancer

Traffic Manager

Application Proxy

Page 9: Assume breach, layered security in Azure tested and ......StorSimple Encrypted Hybrid Storage Azure Client Side Encryption Azure Storage SAS Azure Storage Account Keys Azure File Shares

AZUREAZURE

Demos

Page 10: Assume breach, layered security in Azure tested and ......StorSimple Encrypted Hybrid Storage Azure Client Side Encryption Azure Storage SAS Azure Storage Account Keys Azure File Shares

AZURE

Page 11: Assume breach, layered security in Azure tested and ......StorSimple Encrypted Hybrid Storage Azure Client Side Encryption Azure Storage SAS Azure Storage Account Keys Azure File Shares

AZURE Takeaways• Security by design• Security first… cloud second• Don’t reinvent the wheel• Keep it simple

Page 12: Assume breach, layered security in Azure tested and ......StorSimple Encrypted Hybrid Storage Azure Client Side Encryption Azure Storage SAS Azure Storage Account Keys Azure File Shares

AZURE Your feedback is importanthttp://feedback.expertslive.nl/

Page 13: Assume breach, layered security in Azure tested and ......StorSimple Encrypted Hybrid Storage Azure Client Side Encryption Azure Storage SAS Azure Storage Account Keys Azure File Shares

AZURE Do you want to gain more knowledge about Microsoft technology?

The Future Ready Skills program offers online courseware, online labs, live Q&A’s and expert sessions, so you can acquire your official Microsoft Certificate in the most efficient way.

For more information:

aka.ms/frsblog

FUTURE READY SKILLS

Page 14: Assume breach, layered security in Azure tested and ......StorSimple Encrypted Hybrid Storage Azure Client Side Encryption Azure Storage SAS Azure Storage Account Keys Azure File Shares

AZURE

18:30 – 20:00

Networking

Partner Hub


Recommended