Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Skåne Azure User Group - Azure Security

130 views

Published on

Slide deck to my Skåne Azure User Group Meetup talk on April 9th 2019.

  • Be the first to comment

  • Be the first to like this

Skåne Azure User Group - Azure Security

  1. 1. Azure security - ultimate security in the cloud era Tom Janetscheck Principal Consultant | Microsoft Azure MVP
  2. 2. Tom Janetscheck Principal Consultant – Business Line Enterprise Focused on Azure Infrastructure, Governance, Security Microsoft Azure MVP & P-CSA Twitter: @azureandbeyond Blog: https://blog.azureandbeyond.com About me
  3. 3. Cloud momentum continues to accelerate “The question is no longer: ‘How do I move to the cloud?’ Instead, it’s ‘Now that I’m in the cloud, how do I make sure I’ve optimized my investment and risk exposure?”1 “By 2020 clouds will stop being referred to as ‘public’ and ‘private’. It will simply be the way business is done and IT is provisioned.”² 1KPMG: 2014 Cloud Survey Report, Elevating business in the cloud, December 10, 2014 2IDC: IDC Market Spotlight, Cloud Definitions and Opportunity, April 2015
  4. 4. But cloud security concerns persist Management is increasingly distributed Cloud environments are more dynamic Attackers continue to innovate
  5. 5. Cloud Security is a Shared Responsibility Securing and managing the cloud foundation JOINT RESPONSIBILITYMICROSOFT COMMITMENT Physical assets Datacenter operations Cloud infrastructure Securing and managing your cloud resources Virtual machines Applications & workloads Data
  6. 6. Azure Security
  7. 7. Cloud security is… "…challenging?" “…security by design?" "How do I figure out what I don‘t know?" "Who actually owns security?" "Not knowing where to start is my top AzSec challenge" "Are you ever done?"
  8. 8. Cloud security is… "…challenging?" “…security by design?" "How do I figure out what I don‘t know?" "Who actually owns security?" "Not knowing where to start is my top AzSec challenge" "Are you ever done?"
  9. 9. Infrastructure as Code https://github.com/azureandbeyond/AzureSecurity/Terraform
  10. 10. Microsoft Azure Security Center Dynamically discover and manage the security of your hybrid cloud workloads in a single cloud-based console Enable actionable, adaptive protections that identify and mitigate risk to reduce exposure to attacks Use advanced analytics and Microsoft Intelligent Security Graph to rapidly detect and respond to evolving cyber threats
  11. 11. DETECT RESPOND Custom Alert Rules Investigation Automation & Orchestration Enrichment Prioritization Threat Intelligence Fusion Alert Exploration Built-in Analytics & Machine Learning Search Azure Security Center Pipeline Computers Security Data & Alerts REST APIs Azure Services
  12. 12. Detect threats across the kill chain
  13. 13. Detect threats across the kill chain
  14. 14. Demo
  15. 15. Thank you! @azureandbeyond https://slideshare.net/ThomasJanetscheck

×