Op werkdagen voor 23:00 besteld, morgen in huis Gratis verzending vanaf €20
, ,

Microsoft Azure Security Infrastructure

Paperback Engels 2016 9781509303571
Verkooppositie 5466
Verwachte levertijd ongeveer 8 werkdagen

Samenvatting

Implement maximum control, security, and compliance processes in Azure cloud environments

In Microsoft Azure Security Infrastructure, three leading experts show how to plan, deploy, and operate Microsoft Azure with outstanding levels of control, security, and compliance. You’ll learn how to prepare infrastructure with Microsoft’s integrated tools, prebuilt templates, and managed services–and use these to help safely build and manage any enterprise, mobile, web, or Internet of Things (IoT) system.

The authors guide you through enforcing, managing, and verifying robust security at physical, network, host, application, and data layers. You’ll learn best practices for security-aware deployment, operational management, threat mitigation, and continuous improvement–so you can help protect all your data, make services resilient to attack, and stay in control no matter how your cloud systems evolve.

Three Microsoft Azure experts show you how to:
- Understand cloud security boundaries and responsibilities
- Plan for compliance, risk management, identity/access management, operational security, and endpoint and data protection
- Explore Azure’s defense-in-depth security architecture
- Use Azure network security patterns and best practices
- Help safeguard data via encryption, storage redundancy, rights management, database security, and storage security
- Help protect virtual machines with Microsoft Antimalware for Azure Cloud Services and Virtual Machines
- Use the Microsoft Azure Key Vault service to help secure cryptographic keys and other confidential information
- Monitor and help protect Azure and on-premises resources with Azure Security Center and Operations Management Suite
- Effectively model threats and plan protection for IoT systems
- Use Azure security tools for operations, incident response, and forensic investigation

Specificaties

ISBN13:9781509303571
Taal:Engels
Bindwijze:paperback
Aantal pagina's:224
Druk:1
Verschijningsdatum:9-9-2016
Hoofdrubriek:IT-management / ICT

Lezersrecensies

Wees de eerste die een lezersrecensie schrijft!

Geef uw waardering

Zeer goed Goed Voldoende Matig Slecht

Over Yuri Diogenes

Yuri Diogenes is a Senior Content Developer on the CSI Enterprise Mobility Team, focusing on BYOD and Azure Security Center. Previously, Yuri has worked as a writer for the Windows Security Team and as a Support Escalation Engineer for the CSS Forefront Team, also at Microsoft. He has a Master of Science degree in Cybersecurity Intelligence and Forensics from UTICA College and an MBA from FGF in Brazil, and he holds several industry certifications. He is co-author of Enterprise Mobility Suite: Managing BYOD and Company-Owned Devices (Microsoft Press, 2015), Microsoft Forefront Threat Management Gateway (TMG) Administrator’s Companion (Microsoft Press, 2010), and three other Forefront titles from Microsoft Press.

Andere boeken door Yuri Diogenes

Inhoudsopgave

1. Cloud security
-Cloud security considerations
-Compliance
-Risk management
-Identity and access management
-Operational security
-Endpoint protection
-Data protection
-Shared responsibility
-Cloud computing
-Distributed responsibility in public cloud computing
-Assume breach and isolation
-Azure security architecture
-Azure design principles

2. Identity protection in Azure
-Authentication and authorization
-Azure hierarchy
-Role-Based Access Control
-On-premises integration
-Azure AD Connect
-Federation
-Suspicious activity identification
-Identity protection
-User risk policy
-Sign-in risk policy
-Notification enabling
-Vulnerabilities
-Multi-Factor Authentication
-Azure Multi-Factor Authentication implementation
-Azure Multi-Factor Authentication option configuration

3. Azure network security
-Anatomy of Azure networking
-Virtual network infrastructure
-Network access control
-Routing tables
-Remote access (Azure gateway/point-to-site VPN/
-RDP/Remote PowerShell/SSH)
-Cross-premises connectivity
-Network availability
-Network logging
-Public name resolution
-Network security appliances
-Reverse proxy
-Azure Network Security best practices
-Subnet your networks based on security zones
-Use Network Security Groups carefully
-Use site-to-site VPN to connect Azure Virtual Networks
-Configure host-based firewalls on IaaS virtual machines
-Configure User Defined Routes to control traffic
-Require forced tunneling
-Deploy virtual network security appliances
-Create perimeter networks for Internet-facing devices
-Use ExpressRoute
-Optimize uptime and performance
-Disable management protocols to virtual machines
-Enable Azure Security Center
-Extend your datacenter into Azure

4. Data and storage security
-Virtual machine encryption
-Azure Disk Encryption
-Storage encryption
-File share wire encryption
-Hybrid data encryption
-Authentication
-Wire security
-Data at rest
-Rights management
-Database security
-Azure SQL Firewall
-SQL Always Encrypted
-Row-level security
-Transparent data encryption
-Cell-level encryption
-Dynamic data masking

5. Virtual machine protection with Antimalware
-Understanding the Antimalware solution
-Antimalware deployment
-Antimalware deployment to an existing VM
-Antimalware deployment to a new VM
-Antimalware removal

6. Key management in Azure with Key Vault
-Key Vault overview
-App configuration for Key Vault
-Key Vault event monitoring

7. Azure resource management security
-Azure Security Center overview
-Detection capabilities
-Onboard resources in Azure Security Center
-Apply recommendations
-Resource security health
-Respond to security incidents

8. Internet of Things security
-Anatomy of the IoT
-Things of the world, unite
-Sensors, sensors everywhere
-Big data just got bigger: TMI
-Artificial intelligence to the rescue
-IoT security challenges
-IoT: Insecure by design
-Ramifications of an insecure IoT
-IoT threat modeling
-Windows 10 IoT and Azure IoT
-Windows 10 IoT editions
-Azure IoT Suite and secure Azure IoT infrastructure

9. Hybrid environment monitoring
-Operations Management Suite Security and Audit solution overview
-Log Analytics configuration
-Windows Agent installation
-Resource monitoring using OMS Security and Audit solution
-Security state monitoring
-Identity and access control
-Alerts and threats

10. Operations and management in the cloud
-Scenario
-Design considerations
-Azure Security Center for operations
-Azure Security Center for incident response
-Azure Security Center for forensics investigation

Index
About the authors

Alle 100 bestsellers

Rubrieken

Populaire producten

    Personen

      Trefwoorden

        Microsoft Azure Security Infrastructure