Microsoft Azure Security

Roberto Freato

• Éditeur: Packt Publishing
• Année: 2015
• ISBN:
  9781784399979
• Sujet: Computer Science
• Sous-sujet: Entreprise Applications

Microsoft Azure Security

---

Table of Contents

Microsoft Azure Security

Credits

About the Author

About the Reviewers

www.PacktPub.com

Support files, eBooks, discount offers, and more

Why subscribe?

Free access for Packt account holders

Instant updates on new Packt books

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Errata

Piracy

Questions

1. The Fundamentals of Security Standards

Information security fundamentals

CIA triangle

Security management

Risk analysis

Physical measures and logical measures

Introducing ISO/IEC 27000

Physical security and controls

Security boundaries

Mobile equipment

Logical security and controls

Human resources

Access control

Mobile devices

Cryptography

Communication

Software management

Laws and regulations

Security in software development

Local development tools

Access to source code

Credentials management

Security standards in Azure

Implementing security, privacy, and compliance

Security

Privacy

Compliance

Summary

2. Identity and Access Management for Users

IAM in the current portal

Creating a custom Azure Active Directory

Configuring the Azure Directory user access

Adding a co-administrator to the subscription

Securing the Microsoft account

Two-step verification

Authenticator app

IAM in the Preview portal

Role-Based Access Control

Roles

Hierarchy of security objects

Adding a user in the Preview portal

Advanced authentication

Multi-Factor Authentication

Setting up Multi-Factor Authentication

Management Certificates

Setting up a Management Certificate

Summary

3. Platform as a Service

Hosting the code

Cloud Services

Remote endpoints

Remote Desktop

Startup tasks

Microsoft Antimalware

Network communication

Websites

Project Kudu

Credentials

Connection modes

Settings and connection strings

Backups

Extensions

Hosting the data

Storage

Account keys

Shared Access Signatures

Scalability and performance targets

SQL Database

Setting up firewall rules

Setting up users and roles

Connection settings

Working with a cache

Azure Managed Cache

SSL

Named caches

Azure Redis Cache

Databases

Working with the Service Bus

Shared Access Policies

Summary

4. Infrastructure as a Service

Virtual Machines

External security

Creation: Windows versus Linux

Endpoints and ACLs

Networking and isolation

Extensions

Internal security

Operating system firewall

Auditing and best practices

Virtual Networks

Network Security Groups

Hybrid networks

Azure Backup

Configuring a backup vault

Registering a server

Scheduling backups

Summary

5. Identity and Access Management for Developers

Azure Active Directory

Single-tenant applications

Inspecting messages

Available claims and security groups

Multi-tenant applications

Consent Framework

Azure AD Graph API

Directory extensions

Azure AD Access Control Service

Configuring Facebook as an Identity Provider

Configuring Azure AD as an Identity Provider

Applying claims transformations

Integration with ASP.NET

Azure Key Vault

Creating a Key Vault

Creating the vault

Adding a key or secret

Using the .NET client library

Summary

Index

Microsoft Azure Security

Copyright © 2015 Packt Publishing

All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the author, nor Packt Publishing, and its dealers and distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

First published: April 2015

Production reference: 1310315

Published by Packt Publishing Ltd.

Livery Place

35 Livery Street

Birmingham B3 2PB, UK.

ISBN 978-1-78439-997-9

www.packtpub.com

Credits

Author

Roberto Freato

Reviewers

Jignesh Gangajaliya

Christos Matskas

Marco Parenzan

Naveen Kumar Vijayakumar

Commissioning Editor

Amarabha Banerjee

Acquisition Editor

Reshma Raman

Content Development Editor

Samantha Gonsalves

Technical Editor

Gaurav Suri

Copy Editor

Sonia Michelle Cheema

Project Coordinator

Kinjal Bari

Proofreaders

Simran Bhogal

Ameesha Green

Bernadette Watkins

Indexer

Mariammal Chettiyar

Graphics

Valentina D'silva

Disha Haria

Abhinash Sahu

Production Coordinator

Manu Joseph

Cover Work

Manu Joseph

About the Author

Roberto Freato has been an independent IT consultant ever since he started working. He worked for small software factories while he was studying; after an MSc degree in computer science engineering and a thesis on consumer Cloud computing, he specialized particularly in Cloud computing and Azure. Currently, he works as a freelance consultant for companies in Italy, helping clients to design and kickoff their distributed software solutions. He conducts training sessions for the developer community in his free time, giving lectures at conferences. He has also been a Microsoft MVP since 2010.

I woul...