How to Secure SQL Server in Azure using Service Endpoints, auditing, threat detection and dynamic data masking. Scripts to show how to enable these features.
In this lesson I get into details of Azure Virtual Networks and how to implement them. This is a jam-packed lesson with loads of hands-on stuff. I explain the characteristics of virtual networks and subnets. After explaining some concepts, we go hands-on in building an actual Azure virtual network with two subnets through the Azure portal. As a bonus I also show how to create virtual machines through the Azure portal. After creating the virtual machines in the virtual networks, I show how the Azure built-in DHCP and DNS works.
Other sessions of this training series (2018 Edition):
https://www.youtube.com/playlist?list=PLPie5drlGW253H0BX_MCUnfLYE-FsxnW9
Training Site: http://www.cloudranger.net/azure-training
YouTube : https://www.youtube.com/c/CloudrangerNetwork
Slides : http://www.slideshare.net/shawnismail
Twitter : @shawnismail
GitHub : https://github.com/shawnismail/cloudranger
LinkedIn : https://www.linkedin.com/in/shawnismail
Injecting custom code into authentication and authorization in ASP.NET has always been tedious at best. AspNet.Identity is a new library shipping with MVC 5, built to replace both ASP.NET Membership and Simple Membership. AspNet.Identity makes it much easier to implement custom authentication and authorization without the need to rewrite core components. In this session I will go deep into the abstractions that AspNet.Identity builds atop of, and show how to take advantage of these hook points to implement a custom membership system.
This is the Part 1 of the Azure Active Directory Topic. In this session I introduce the Azure AD and talk about what it is, how it differentiates with on-premises Active Directory Domain Services (AD DS). Further, in this session I provide demos on how to create Azure AD Users from the Azure Portal, associate Custom domains with the Azure AD tenant and the Azure AD PowerShell module. As a bonus, I also talk about and demo how to create additional Azure AD directory within the subscription.
Microservices with Spring Boot Tutorial | EdurekaEdureka!
( Microservices Architecture Training: https://www.edureka.co/microservices-architecture-training )
This Edureka's PPT on "Microservices with Spring Boot" will give you an introduction on microservices with a short demo. In this PPT, you will learn the following:
1. History Before Microservices
2. What Is Microservice Architecture?
3. Advantages Of Microservice Architecture
4. Introduction To Spring Boot
5. Hands-On Using Spring Boot
Check out our Playlist: https://goo.gl/K2oP94
Follow us to never miss an update in the future.
Instagram: https://www.instagram.com/edureka_learning/
Facebook: https://www.facebook.com/edurekaIN/
Twitter: https://twitter.com/edurekain
LinkedIn: https://www.linkedin.com/company/edureka
In this lesson I get into details of Azure Virtual Networks and how to implement them. This is a jam-packed lesson with loads of hands-on stuff. I explain the characteristics of virtual networks and subnets. After explaining some concepts, we go hands-on in building an actual Azure virtual network with two subnets through the Azure portal. As a bonus I also show how to create virtual machines through the Azure portal. After creating the virtual machines in the virtual networks, I show how the Azure built-in DHCP and DNS works.
Other sessions of this training series (2018 Edition):
https://www.youtube.com/playlist?list=PLPie5drlGW253H0BX_MCUnfLYE-FsxnW9
Training Site: http://www.cloudranger.net/azure-training
YouTube : https://www.youtube.com/c/CloudrangerNetwork
Slides : http://www.slideshare.net/shawnismail
Twitter : @shawnismail
GitHub : https://github.com/shawnismail/cloudranger
LinkedIn : https://www.linkedin.com/in/shawnismail
Injecting custom code into authentication and authorization in ASP.NET has always been tedious at best. AspNet.Identity is a new library shipping with MVC 5, built to replace both ASP.NET Membership and Simple Membership. AspNet.Identity makes it much easier to implement custom authentication and authorization without the need to rewrite core components. In this session I will go deep into the abstractions that AspNet.Identity builds atop of, and show how to take advantage of these hook points to implement a custom membership system.
This is the Part 1 of the Azure Active Directory Topic. In this session I introduce the Azure AD and talk about what it is, how it differentiates with on-premises Active Directory Domain Services (AD DS). Further, in this session I provide demos on how to create Azure AD Users from the Azure Portal, associate Custom domains with the Azure AD tenant and the Azure AD PowerShell module. As a bonus, I also talk about and demo how to create additional Azure AD directory within the subscription.
Microservices with Spring Boot Tutorial | EdurekaEdureka!
( Microservices Architecture Training: https://www.edureka.co/microservices-architecture-training )
This Edureka's PPT on "Microservices with Spring Boot" will give you an introduction on microservices with a short demo. In this PPT, you will learn the following:
1. History Before Microservices
2. What Is Microservice Architecture?
3. Advantages Of Microservice Architecture
4. Introduction To Spring Boot
5. Hands-On Using Spring Boot
Check out our Playlist: https://goo.gl/K2oP94
Follow us to never miss an update in the future.
Instagram: https://www.instagram.com/edureka_learning/
Facebook: https://www.facebook.com/edurekaIN/
Twitter: https://twitter.com/edurekain
LinkedIn: https://www.linkedin.com/company/edureka
Microsoft Azure Training - [3] Azure Accounts, Subscriptions and Admin Roles ...Shawn Ismail
In this session I go over what Azure accounts and subscriptions are. Further details are provided about various Admin roles in Microsoft Azure both at account and subscription level. This sessions ends with a demo of everything discussed in this session and singing up for a Trial Azure Subscription. Please subscribe to the channel to stay updated about the training. Also please comment on the training videos. Thank you!
http://www.cloudranger.net
YouTube: https://www.youtube.com/c/CloudrangerNetwork
SynapseIndia dotnet website security development
SynapseIndia Drupal development
SynapseIndia Ecommerce development
SynapseIndia Sharepoint development
SynapseIndia PHP development
SynapseIndia Dotnet development
In this webinar, we review the steps necessary to design, set up, and deploy IT cloud infrastructure for running a multi-server, Microsoft SharePoint Server farm on AWS. In this webinar we will also cover how to architect for high availability and provision the relevant AWS services and resources to run SharePoint Server workloads at scale on the AWS Cloud. You will find out where to access available content and tools, such as AWS CloudFormation templates and the Advanced Implementation Guide that will help you quickly implement and customize a scalable, enterprise-class SharePoint Server farm on AWS. This webinar is designed for a technical audience. After the presentation, you will have an opportunity to participate in a live Q&A discussion, where you may write in questions to AWS team members.
(DEV202) Under the Desk to the AWS Cloud with Windows PowerShellAmazon Web Services
In this session, we will examine how to use AWS Tools for Windows PowerShell to move a typical in-house application, housed on a "server under someone's desk", to the cloud. We will cover importing the server as a virtual machine image running an Amazon Virtual Private Cloud (Amazon VPC) in Amazon Elastic Compute Cloud (Amazon EC2). We will then show how to configure, maintain, and monitor the running instances by automating AWS infrastructure, including the provisioning of the AWS resources, Amazon EC2 Simple Systems Manager (SSM), and Amazon CloudWatch.
Azure Private Link provides private connectivity from a virtual network to Azure platform as a service (PaaS), customer-owned, or Microsoft partner services.
Enter The Matrix Securing Azure’s AssetsBizTalk360
This talk is mainly on the security aspects of Azure, in any context. you’ll get an overview on where security is handled, some practices and how to monitor and act accordingly to certain threats and issues. It will focus on IaaS, PaaS and SaaS. As security is an integral part of an environment, the integration aspect is not far away. Focus products include Azure and all related services.
Deploying SharePoint on Microsoft Azure #spsnairobi2014Martin Njalale
Deploying SharePoint on Microsoft Azure #spsnairobi2014. This presentation was done by Martin Njalale of Caytree Partners LLC at Sharepoint Saturday Nairobi event on 18th Oct 2014, held at Techno Brain HQ in Nairobi, Kenya.
The presentation starts with an introduction into cloud computing and Microsoft Azure. It then goes ahead to explain how SharePoint can be deployed on Microsoft Azure Virtual Machines.
Microsoft Azure Training - [3] Azure Accounts, Subscriptions and Admin Roles ...Shawn Ismail
In this session I go over what Azure accounts and subscriptions are. Further details are provided about various Admin roles in Microsoft Azure both at account and subscription level. This sessions ends with a demo of everything discussed in this session and singing up for a Trial Azure Subscription. Please subscribe to the channel to stay updated about the training. Also please comment on the training videos. Thank you!
http://www.cloudranger.net
YouTube: https://www.youtube.com/c/CloudrangerNetwork
SynapseIndia dotnet website security development
SynapseIndia Drupal development
SynapseIndia Ecommerce development
SynapseIndia Sharepoint development
SynapseIndia PHP development
SynapseIndia Dotnet development
In this webinar, we review the steps necessary to design, set up, and deploy IT cloud infrastructure for running a multi-server, Microsoft SharePoint Server farm on AWS. In this webinar we will also cover how to architect for high availability and provision the relevant AWS services and resources to run SharePoint Server workloads at scale on the AWS Cloud. You will find out where to access available content and tools, such as AWS CloudFormation templates and the Advanced Implementation Guide that will help you quickly implement and customize a scalable, enterprise-class SharePoint Server farm on AWS. This webinar is designed for a technical audience. After the presentation, you will have an opportunity to participate in a live Q&A discussion, where you may write in questions to AWS team members.
(DEV202) Under the Desk to the AWS Cloud with Windows PowerShellAmazon Web Services
In this session, we will examine how to use AWS Tools for Windows PowerShell to move a typical in-house application, housed on a "server under someone's desk", to the cloud. We will cover importing the server as a virtual machine image running an Amazon Virtual Private Cloud (Amazon VPC) in Amazon Elastic Compute Cloud (Amazon EC2). We will then show how to configure, maintain, and monitor the running instances by automating AWS infrastructure, including the provisioning of the AWS resources, Amazon EC2 Simple Systems Manager (SSM), and Amazon CloudWatch.
Azure Private Link provides private connectivity from a virtual network to Azure platform as a service (PaaS), customer-owned, or Microsoft partner services.
Enter The Matrix Securing Azure’s AssetsBizTalk360
This talk is mainly on the security aspects of Azure, in any context. you’ll get an overview on where security is handled, some practices and how to monitor and act accordingly to certain threats and issues. It will focus on IaaS, PaaS and SaaS. As security is an integral part of an environment, the integration aspect is not far away. Focus products include Azure and all related services.
Deploying SharePoint on Microsoft Azure #spsnairobi2014Martin Njalale
Deploying SharePoint on Microsoft Azure #spsnairobi2014. This presentation was done by Martin Njalale of Caytree Partners LLC at Sharepoint Saturday Nairobi event on 18th Oct 2014, held at Techno Brain HQ in Nairobi, Kenya.
The presentation starts with an introduction into cloud computing and Microsoft Azure. It then goes ahead to explain how SharePoint can be deployed on Microsoft Azure Virtual Machines.
IDERA Slides: Managing the Transition to Hybrid CloudDATAVERSITY
Companies are struggling to understand the various cloud deployment options and how they will effectively manage their environment. As organizations transition to using cloud solutions for part or all of their database configurations, the IT teams need to understand what choices they must make for ensuring they can meet business expectations for performance, security, and availability. IDERA’s Rob Reinauer shares insights into managing SQL Server environments from cloud to ground so that you can make confident decisions for your database deployments and mitigate the added data risks cloud environments can introduce.
Come learn about new security features like Vulnerability Assessment, Information Protection, Thread Detection and Always Encrypt to see how Azure SQL Database is securing your data in the most secure database on the planet.
AWS Webcast - Deploying Remote Desktop Gateway on the AWS CloudAmazon Web Services
This webinar reviews our new Remote Desktop Gateway Reference Implementation Guide which will help you deploy Remote Desktop Gateway on AWS in about an hour. Included is an overview of the reference architecture, best practices for securely accessing your Windows-based instances using the Remote Desktop Protocol (RDP) for remote administration. Also provided are AWS CloudFormation templates to help automate deployment.
Do you know that enterprises with more than half their business from cloud generate 1.6X more recurring revenue than other partners?
Enterprises are capitalizing on the growing cloud services market by building successful practices on Microsoft Azure, and are outperforming their peers by growing more quickly and profitably. Building a website is one such business initiative. In recent times, building a website has become easier with the new CMS available, but configuring it to be up and running was always a time consuming job. Microsoft Azure enables you to build, deploy and scale your website, while configuring the database and domain, providing the connection string, and setting up FTP account to upload your website.
Following topics are covered in this webinar
• Introduction to Cloud and Microsoft Azure Capabilities
• Overview & Pre-Requisites for Microsoft Azure Websites
• Free vs. Shared vs. Standard Websites
• Managing your Azure Websites: Preview portal & Command Line
• Deploy and scale modern websites with Azure
State of ICS and IoT Cyber Threat Landscape Report 2024 previewPrayukth K V
The IoT and OT threat landscape report has been prepared by the Threat Research Team at Sectrio using data from Sectrio, cyber threat intelligence farming facilities spread across over 85 cities around the world. In addition, Sectrio also runs AI-based advanced threat and payload engagement facilities that serve as sinks to attract and engage sophisticated threat actors, and newer malware including new variants and latent threats that are at an earlier stage of development.
The latest edition of the OT/ICS and IoT security Threat Landscape Report 2024 also covers:
State of global ICS asset and network exposure
Sectoral targets and attacks as well as the cost of ransom
Global APT activity, AI usage, actor and tactic profiles, and implications
Rise in volumes of AI-powered cyberattacks
Major cyber events in 2024
Malware and malicious payload trends
Cyberattack types and targets
Vulnerability exploit attempts on CVEs
Attacks on counties – USA
Expansion of bot farms – how, where, and why
In-depth analysis of the cyber threat landscape across North America, South America, Europe, APAC, and the Middle East
Why are attacks on smart factories rising?
Cyber risk predictions
Axis of attacks – Europe
Systemic attacks in the Middle East
Download the full report from here:
https://sectrio.com/resources/ot-threat-landscape-reports/sectrio-releases-ot-ics-and-iot-security-threat-landscape-report-2024/
Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...Ramesh Iyer
In today's fast-changing business world, Companies that adapt and embrace new ideas often need help to keep up with the competition. However, fostering a culture of innovation takes much work. It takes vision, leadership and willingness to take risks in the right proportion. Sachin Dev Duggal, co-founder of Builder.ai, has perfected the art of this balance, creating a company culture where creativity and growth are nurtured at each stage.
Elevating Tactical DDD Patterns Through Object CalisthenicsDorra BARTAGUIZ
After immersing yourself in the blue book and its red counterpart, attending DDD-focused conferences, and applying tactical patterns, you're left with a crucial question: How do I ensure my design is effective? Tactical patterns within Domain-Driven Design (DDD) serve as guiding principles for creating clear and manageable domain models. However, achieving success with these patterns requires additional guidance. Interestingly, we've observed that a set of constraints initially designed for training purposes remarkably aligns with effective pattern implementation, offering a more ‘mechanical’ approach. Let's explore together how Object Calisthenics can elevate the design of your tactical DDD patterns, offering concrete help for those venturing into DDD for the first time!
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...James Anderson
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered QualityInflectra
In this insightful webinar, Inflectra explores how artificial intelligence (AI) is transforming software development and testing. Discover how AI-powered tools are revolutionizing every stage of the software development lifecycle (SDLC), from design and prototyping to testing, deployment, and monitoring.
Learn about:
• The Future of Testing: How AI is shifting testing towards verification, analysis, and higher-level skills, while reducing repetitive tasks.
• Test Automation: How AI-powered test case generation, optimization, and self-healing tests are making testing more efficient and effective.
• Visual Testing: Explore the emerging capabilities of AI in visual testing and how it's set to revolutionize UI verification.
• Inflectra's AI Solutions: See demonstrations of Inflectra's cutting-edge AI tools like the ChatGPT plugin and Azure Open AI platform, designed to streamline your testing process.
Whether you're a developer, tester, or QA professional, this webinar will give you valuable insights into how AI is shaping the future of software delivery.
Transcript: Selling digital books in 2024: Insights from industry leaders - T...BookNet Canada
The publishing industry has been selling digital audiobooks and ebooks for over a decade and has found its groove. What’s changed? What has stayed the same? Where do we go from here? Join a group of leading sales peers from across the industry for a conversation about the lessons learned since the popularization of digital books, best practices, digital book supply chain management, and more.
Link to video recording: https://bnctechforum.ca/sessions/selling-digital-books-in-2024-insights-from-industry-leaders/
Presented by BookNet Canada on May 28, 2024, with support from the Department of Canadian Heritage.
Neuro-symbolic is not enough, we need neuro-*semantic*Frank van Harmelen
Neuro-symbolic (NeSy) AI is on the rise. However, simply machine learning on just any symbolic structure is not sufficient to really harvest the gains of NeSy. These will only be gained when the symbolic structures have an actual semantics. I give an operational definition of semantics as “predictable inference”.
All of this illustrated with link prediction over knowledge graphs, but the argument is general.
Accelerate your Kubernetes clusters with Varnish CachingThijs Feryn
A presentation about the usage and availability of Varnish on Kubernetes. This talk explores the capabilities of Varnish caching and shows how to use the Varnish Helm chart to deploy it to Kubernetes.
This presentation was delivered at K8SUG Singapore. See https://feryn.eu/presentations/accelerate-your-kubernetes-clusters-with-varnish-caching-k8sug-singapore-28-2024 for more details.
Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024Tobias Schneck
As AI technology is pushing into IT I was wondering myself, as an “infrastructure container kubernetes guy”, how get this fancy AI technology get managed from an infrastructure operational view? Is it possible to apply our lovely cloud native principals as well? What benefit’s both technologies could bring to each other?
Let me take this questions and provide you a short journey through existing deployment models and use cases for AI software. On practical examples, we discuss what cloud/on-premise strategy we may need for applying it to our own infrastructure to get it to work from an enterprise perspective. I want to give an overview about infrastructure requirements and technologies, what could be beneficial or limiting your AI use cases in an enterprise environment. An interactive Demo will give you some insides, what approaches I got already working for real.
UiPath Test Automation using UiPath Test Suite series, part 4DianaGray10
Welcome to UiPath Test Automation using UiPath Test Suite series part 4. In this session, we will cover Test Manager overview along with SAP heatmap.
The UiPath Test Manager overview with SAP heatmap webinar offers a concise yet comprehensive exploration of the role of a Test Manager within SAP environments, coupled with the utilization of heatmaps for effective testing strategies.
Participants will gain insights into the responsibilities, challenges, and best practices associated with test management in SAP projects. Additionally, the webinar delves into the significance of heatmaps as a visual aid for identifying testing priorities, areas of risk, and resource allocation within SAP landscapes. Through this session, attendees can expect to enhance their understanding of test management principles while learning practical approaches to optimize testing processes in SAP environments using heatmap visualization techniques
What will you get from this session?
1. Insights into SAP testing best practices
2. Heatmap utilization for testing
3. Optimization of testing processes
4. Demo
Topics covered:
Execution from the test manager
Orchestrator execution result
Defect reporting
SAP heatmap example with demo
Speaker:
Deepak Rai, Automation Practice Lead, Boundaryless Group and UiPath MVP
GraphRAG is All You need? LLM & Knowledge GraphGuy Korland
Guy Korland, CEO and Co-founder of FalkorDB, will review two articles on the integration of language models with knowledge graphs.
1. Unifying Large Language Models and Knowledge Graphs: A Roadmap.
https://arxiv.org/abs/2306.08302
2. Microsoft Research's GraphRAG paper and a review paper on various uses of knowledge graphs:
https://www.microsoft.com/en-us/research/blog/graphrag-unlocking-llm-discovery-on-narrative-private-data/
2. Why should we use service endpoints ?
Mitesh.chauhan@outlook.com
@miteshchauhanuk
Miteshc.wordpress.com
Access Azure SQL from Azure VMs through the Microsoft Azure backbone network
without the need for internet endpoints on the SQL Server.
• Neater way to access SQL from Azure VNET (No NAT device, load balancer or SQL public IP required)
• If using forced tunnelling, you can now access SQL Server directly
Notes
• Service endpoints are applied at the subnet level, consider this in your virtual network design
• VNET and SQL Server must be in the same region, can be in different subscriptions
• There can be many unique service endpoints per subnet
• Accessing SQL via service endpoints does NOT mean the SQL Server becomes part of your virtual network
3. SQL Database Server with Internet Endpoints
Mitesh.chauhan@outlook.com
@miteshchauhanuk
Miteshc.wordpress.com
4. SQL Database Server with Service Endpoints
Mitesh.chauhan@outlook.com
@miteshchauhanuk
Miteshc.wordpress.com
5. Steps required for connecting SQL Server to Subnet
Mitesh.chauhan@outlook.com
@miteshchauhanuk
Miteshc.wordpress.com
VNET
Create a service endpoint on your subnet
• Specify which service (SQL) in which region can access the Subnet
Azure SQL Server
Create SQL Server Firewall Rule to connect to service endpoint for the subnet.
• Specify which Service Endpoint in which vnet/ subnet to allow connections from.
Network Security Group (NSG = Layer 4 Firewall Rules)
Allow SQL traffic from desired region.
• Attach NSG to required subnet
6. Tips To Secure Your SQL Server Further
Mitesh.chauhan@outlook.com
@miteshchauhanuk
Miteshc.wordpress.com
1. Use NSGs to lock down access to only the SQL service and region required
We can select SQL or Storage for the service endpoint. We can then specify the service and the region in an NSG
Security Features available for your production databases / servers
2. Enable Auditing and Threat Detection
3. Databases are encrypted by default. Microsoft Manage the encryption and keys.
• Option to Bring Your Own Keys is also available.
7. Tips To Secure Your SQL Server Further
Mitesh.chauhan@outlook.com
@miteshchauhanuk
Miteshc.wordpress.com
Use Dynamic Data Masking to protect personal data – Create Rules
Enable dynamic data masking on your columns in your tables that have personally identifiable information.
8. Tips To Secure Your SQL Server Further
Mitesh.chauhan@outlook.com
@miteshchauhanuk
Miteshc.wordpress.com
Use Dynamic Data Masking to protect personal data - Results
Any non admin accounts (that have not been excluded) will only see masked data.
Example
Masking rule on customertable,
EmailAddress Column
RESULT > > >
13. Microsoft Source Reference
Mitesh.chauhan@outlook.com
@miteshchauhanuk
Miteshc.wordpress.com
• Use Virtual Network service endpoints and rules for Azure SQL Database
• https://docs.microsoft.com/en-us/azure/sql-database/sql-database-vnet-service-endpoint-rule-overview
• Virtual Network Service Endpoints
• https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview#key-benefits
