This talk was presented at Microsoft Global Azure Boot Camp where I talked about how an organization can implement security in their cloud infrastructure.

1. HOW NOT TO
SUCK AT CLOUD
SECURITY

2. NO ONE IS SECURED!
2

3. 3

4. THINK SECURITY
4

5. HELLO!
I am Rohan Aggarwal
Security Analyst, TCS
Security Researcher, Synack Red Team
Bug Bounty Hunter, Hackerone
Youtuber (WeDifferernt)
5

6. WHAT IS CLOUD SECURITY?
Nothing but the security services.
6

7. WHY IS CLOUD SECURITY?
They want what you’ve got.
Don’t give it to them.
7

8. “Out of sight, out of mind is not
an unusual attitude when it
comes to cloud storage. But the
reality is that the organization
still remains the data controller
and is responsible for it.”
8

9. 9

10. 10
IMPLEMENTING
SECURITY IN AZURE

11. 11
1. PROTECTING ACCOUNTS
(AAD)

12. 12
2. SECURING THE AZURE PORTAL
(RBAC)

13. 13
3. NETWORK SECURITY

14. 14
1. AZURE VIRTUAL NETWORK
Your isolated datacenter on cloud

15. 15
2. SUBNET
Sub part of virtual network.

16. They are of 2 types
16
› Public Subnet
› Private Subnet

17. 17
3. NETWORK SECURITY GROUPS
Connecting & Configuring the dots

18. TYPICAL CLOUD NETWORK
18

19. WHICH ONE LOOKS MORE SECURE?
19

20. MORE SECURE!
20

21. MUCH MORE SECURE!
21

22. WHAT MORE CAN I DO TO SECURE?
22
› Data Security
› Secret Management
› Monitoring & Logging
› N lot’s more!!!

23. THANKS!
You can find me at:
@nahoragg
nahoragg@gmail.com
nahoragg
23