20181213 - wazug protecting your data with azure ad
•Download as PPTX, PDF•
0 likes•107 views
WAZUG session about Azure AD, Conditional Access, MFA, Privilege Identity Management for Office 365 and Azure Resources
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to 20181213 - wazug protecting your data with azure ad
Similar to 20181213 - wazug protecting your data with azure ad (20)
More from Arjan Cornelissen
More from Arjan Cornelissen (8)
Recently uploaded
Recently uploaded (20)
20181213 - wazug protecting your data with azure ad
- 1. Protecting your data with Azure AD
- 2. Arjan Cornelisssen SharePoint & Office 365 Architect WorkTogether.tech @arjancornelis
- 4. lllllllll lllllllll Phishing Password Spray Breach Replay 200K password spray attacks blocked in August 2018 23M high risk enterprise sign-in attempts detected in March 2018 4.6Battacker-driven sign-ins detected in May 2018 Top attacks against Azure AD John Doe lllllll
- 5. Sobering statistics The frequency and sophistication of cybersecurity attacks are escalating $6T annual cost of cybercrime to the global economy $4M average cost of a data breach to a company 140+ median # days attackers reside within a victim’s network before detection network intrusions due to compromised user credentials 75%+
- 6. Corporate Network Geo-location MacOS Android iOS Windows Windows Defender ATP Client apps Browser apps Google ID MSA Azure AD ADFS Employee & Partner Users and Roles Trusted & Compliant Devices Location Client apps & Auth Method Conditions Microsoft Cloud App Security Force password reset Require MFA Allow/block access Terms of Use ****** Limited access Controls Machine learning Policies Real time Evaluation Engine Session Risk 3 40TB Effective policy
- 10. Demo
- 11. Microsoft Enterprise Mobility + Security Technology Benefit E3 E5 Azure Active Directory Premium P1 Secure single sign-on to cloud and on-premises app MFA, conditional access, and advanced security reporting ● ● Azure Active Directory Premium P2 Identity and access management with advanced protection for users and privileged identities ● Microsoft Intune Mobile device and app management to protect corporate apps and data on any device ● ● Azure Information Protection P1 Encryption for all files and storage locations Cloud-based file tracking ● ● Azure Information Protection P2 Intelligent classification and encryption for files shared inside and outside your organization ● Microsoft Cloud App Security Enterprise-grade visibility, control, and protection for your cloud applications ● Microsoft Advanced Threat Analytics Protection from advanced targeted attacks leveraging user and entity behavioral analytics ● ● Identity and access management Managed mobile productivity Information protection Threat Detection
- 12. Admin side
- 13. Privileged Identity Management Enforce on-demand, just-in-time administrative access when needed Ensure policies are met with alerts, audit reports and access reviews Manage admins access in Azure AD and also in Azure RBAC User Administrator Discover, restrict, and monitor privileged identities UserAdministrator privileges expire after a specified interval
- 16. Demo
- 17. Identity Secure Score Visibility into your Identity security position and how to improve it Insights into your Identity security position Guidance to increase your security level Easily compare score against other organizations View trends Set an ideal score. Choose controls to achieve ideal score based on impact. Ignore controls that are not valid for you. 3rd party product support. Checkout your Identity secure score now @ http://aka.ms/MyIdentitySecureScore
- 18. Secure Score Checkout your Identity secure score now @ http://aka.ms/MyIdentitySecureScore
- 19. Azure monitoring
- 20. Preview features
- 21. Password-less with Microsoft Authenticator app aka.ms/gopasswordless Available today In Public preview today
- 22. Demo
- 23. Our Security mindset needs to be updated
Editor's Notes
- De medewerker wordt nu het centrale punt om te beveiligen
- 4
- Custom Controls
- 10
- Conditional Access Policies -> What If for Twitter Wazug test user NL IP: 84.86.200.150 Afghanistan IP: 43.230.209.0 Twitter Google -> Terms of use
- 12
- PIM Role activate Azure resource demo
- 18
- 19
- Now in preview https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-phone-sign-in
- Password Spray (aka Brute Force, Hammering) Complexiteit, expiration werkt niet. Medewerkers gebruiken zaken die te onthouden zijn. Sticky notes