Azure Security Services, Features and Options. Ioannis Stavrinides Technical Evangelist, CEE MC

Save this PDF as:
 WORD  PNG  TXT  JPG

Size: px
Start display at page:

Download "Azure Security Services, Features and Options. Ioannis Stavrinides Technical Evangelist, CEE MC"

Transcription

1 Azure Security Services, Features and Options Ioannis Stavrinides Technical Evangelist, CEE MC

2 Agenda for today General security features Encryption Other security mechanisms Azure Active Directory security features Azure Key Vault SQL Db security features Azure Security Center

3 Securing your services shouldn t be an afterthought It should be the foundation of the process

4 General security features

5 Encryption

6 Encryption Data in transit Strong SSL/TLS cipher suite Perfect Forward Secrecy Datacenter-to-datacenter encryption Data at rest BitLocker disk encryption Per-file encryption for customer content

7 Encryption in Transit Azure Encrypts communication between Azure Datacenters Encrypts transactions through Azure Portal with HTTPS Supports FIPS Customer Can choose HTTPS for REST API (recommended) Configures HTTPS endpoints for application running in Azure Encrypts traffic between Web client and server by implementing TLS on IIS

8 Encryption at Rest Provides defense-in-depth against Offline attacks Online attacks when keys are used as a secondary AuthZ mechanism Encryption at-rest is required by certain sovereign laws and certifications

9 Azure Promises Control Customers can choose if and when data is encrypted Customers can choose what encryption keys are used and where they are stored Customers can decide at anytime to revoke access to the keys and data Transparency Customers have full visibility to the encryption state of their data Customers know at any time where their data is stored Customers have the ability to view logs at any time related to the stored data and keys

10 Encryption Models Encryption Models Server Encryption Client Encryption Server Side Encryption using service managed keys Server side encryption using customer managed keys in Azure KeyVault Server side encryption using on-prem customer managed keys Azure services can see decrypted data Microsoft manages the keys Full cloud functionality Azure services can see decrypted data Customer controls keys via Azure Key Vault Full cloud functionality Azure services can see decrypted data Customer controls keys On- Prem Full cloud functionality Azure services cannot see decrypted data Customer keep keys onpremises REDUCED cloud functionality

11 Other security mechanisms

12 Firewall Protection GA

13 Threat Detection GA

14 Network Security Group GA

15 Role Based Access Control GA

16 Azure Active Directory

17 GA Integration Federation for AD integration Directly from the Portal. No code necessary Using the Active Directory Authentication Library (ADAL) for custom scenarios

18 IN PREVIEW Azure AD B2C: IdMaaS for Applications Azure AD security, availability, and scalability for customer IDM Adds B2C features to Azure AD Social IdPs and application local accounts Self-service sign up, password reset, profile management Customizable sign in and sign up UI Same protocols, libraries, and programming model Consumption based pricing Meters for # of users and # of authentications

19 Azure AD B2C IN PREVIEW

20 GA Microsoft account + Azure AD Many apps want to sign users in from both Microsoft account and Azure AD Working on unified dev experience Single endpoint, OpenID Connect and OAuth 2.0 Single SDK Single end user sign in experience Single streamlined app registration experience, outside of Azure portal, no Azure subscription required Works with unified Office business + consumer APIs

21 IN PREVIEW Enhanced Device Support Windows 10 Azure AD Join: sign-in to desktop with Azure AD account Single sign on to: Kerberos-based on-premises applications Native applications that use WebAccountManager Web apps that support Azure AD sign-in

22 GA Multi Factor Authentication Authenticate the user over a different channel Text Call Authenticator app Secure Tokens Username/Password is something you know Second factor is something you own/have (device, RSA tokens etc)

23 GA Self Service Password Reset Administrators can create users and know only their initial password User must change password on first log-in Users can reset their password without contacting support Two factor authentication (phone, secondary )

24 GA Rights Management (RMS) Protect information from unauthorized access Protect information anywhere Audit and monitor usage

25 Azure Active Directory Advanced Monitoring Features

26 Brute Force attack

27 Sign in from anonymizing network IP Address:

28 Unlikely Travel Location: Seattle, WA Time: 8:29 AM, PST (3:29 PM, UTC) Location: Somewhere in Asia Time: 7:54 AM, local time (3:54 PM, UTC)

29 Tenant spanning activity X Bad password X Bad username X Bad password X Bad username X Bad password X Bad username IP Address: X Bad username X Bad password

30 Sign in from know, infected device

31 IN PREVIEW Active Directory Identity Protection Using the aforementioned features: Compiles risk score of attempt Surfaces data to administrators Admins can investigate and tend to events manually Policies for automated mitigation Request 2FA Block request

32 More AD Security features in Preview Privileged Identity Management Dynamic Group Membership Conditional Access Policies Password Rollover Self-Service Access Requests

33 Azure Key Vault GA

34 Secret management asks from our customers My app on Azure has passwords and cryptographic keys I need a safe place to save these in Azure. I need to (re)use AD users and groups to manage access to secrets. I do NOT want to be in the news for a silly mistake

35 Azure Key Vault An Azure resource provider that lets you Store & manage SECRETS (esp app config), and release them to authorized apps & users. Store & manage KEYS, and perform cryptographic operations in isolated service. Backed by Hardware Security Modules All secrets and keys are protected at rest with key chain terminating in HSMs. Keys marked as HSM-protected are protected even at runtime with HSMs. Key Vault customer s dedicated HSM Azure Key Vault is a multi-tenant service backed by Microsoft-managed HSMs.

36 Your ORG is in control via Active Directory Users and apps authenticate to your key vaults using your organization s Azure AD Benefits for organizations: Organizations can centrally revoke access to ALL key vaults in their organization. If a user leaves, they instantly lose access to ALL key vaults in the organization. Organizations can customize authentication via the options in Azure AD. Azure do not have ANY default access to customer key vault for disk encryption feature

37 Azure SQL Db

38 GA Transparent Data Encryption Regulatory Compliance TDE is a requirement for HIPAA, PCI, SOX etc Simplicity On by default (V12) Protects database, backups and logs Keys managed by the service Transparent No changes needed from the app

39 GA Row-Level Security Fine-grained Access Control Multi-tenant databases allow by definition access to it by different customers RLS allows to secure access to customer data from only the specific customer Application Transparency No change needed for queries Centralized Security Logic Logic in the database Schema-bound to the protected table Higher security, reduced app maintenance and complexity

40 Table.CreditCardNo IN PREVIEW Dynamic Data Masking Limit sensitive data exposure On the fly obfuscation Policy driven Multiple OOB functions available Define privileged users Recommends fields to mask Azure DB Dynamic Masking

41 IN PREVIEW Always Encrypted Client-side encryption for Azure SQL Db Data transparently encrypted inside a client driver Client manages keys Encrypted data is queryable Sensitive data remains encrypted at all times (never (!) decrypted)

42 IN PREVIEW Threat Detection Detects anomalous database activities indicating potential security threats to the database SQL Injection Logging of suspicious, anomalous behavior

43 Azure Security Center IN PREVIEW

44 Azure Security Center Prevent Detect Respond Integrated monitoring across subscriptions Broad ecosystem

45 Azure Security Center Prevention Monitor security state Define policies and provides recommendations Rapid deployment of security services

46 Azure Security Center Detection Collection and analysis of security data Leverage global threat intelligence data Advance analytics (Machine learning, Behavioral analysis)

47 Azure Security Center Respond Prioritize security incidents/alerts Insights to source of attacks and impacted resources Suggestions to stop attack and prevent future attacks

48 Links Encryption in Transit Encryption at Rest Azure IaaS Firewall Azure NetSec Whitepaper Azure NSGs Azure RBAC Azure AD AAD B2C Microsoft Account + AAD Azure AD Domain Services Azure AD MFA Azure AD Self-Service Pass Reset Azure RMS Azure AD Identity Protection Azure Key Vault Azure SQL Db TDE

49 Links Azure SQL Db Row-Level Security Azure SQL Db Dynamic Data Masking Azure SQL Db Always Encrypted Azure SQL Db Threat Detection Azure Security Center

50 Questions?

51 Thank you

Security Best Practices for Microsoft Azure Applications

Security Best Practices for Microsoft Azure Applications Security Best Practices for Microsoft Azure Applications Varun Sharma Principal Security Engineer, Information Security & Risk Management (ISRM), Microsoft IT Service Lines Application Security Infrastructure

More information

IBM Cloud Security Draft for Discussion September 12, 2011. 2011 IBM Corporation

IBM Cloud Security Draft for Discussion September 12, 2011. 2011 IBM Corporation IBM Cloud Security Draft for Discussion September 12, 2011 IBM Point of View: Cloud can be made secure for business As with most new technology paradigms, security concerns surrounding cloud computing

More information

NCSU SSO. Case Study

NCSU SSO. Case Study NCSU SSO Case Study 2 2 NCSU Project Requirements and Goals NCSU Operating Environment Provide support for a number Apps and Programs Different vendors have their authentication databases End users must

More information

Flexible Identity Federation

Flexible Identity Federation Flexible Identity Federation Quick start guide version 1.0.1 Publication history Date Description Revision 2015.09.23 initial release 1.0.0 2015.12.11 minor updates 1.0.1 Copyright Orange Business Services

More information

APIs The Next Hacker Target Or a Business and Security Opportunity?

APIs The Next Hacker Target Or a Business and Security Opportunity? APIs The Next Hacker Target Or a Business and Security Opportunity? SESSION ID: SEC-T07 Tim Mather VP, CISO Cadence Design Systems @mather_tim Why Should You Care About APIs? Amazon Web Services EC2 alone

More information

Securing Data in Oracle Database 12c

Securing Data in Oracle Database 12c Securing Data in Oracle Database 12c Thomas Kyte http://asktom.oracle.com/ Safe Harbor Statement The following is intended to outline our general product direction. It is intended for information purposes

More information

Microsoft SharePoint Architectural Models

Microsoft SharePoint Architectural Models Microsoft SharePoint This topic is 1 of 5 in a series Introduction to Fundamental SharePoint This series is intended to raise awareness of the different fundamental architectural models through which SharePoint

More information

SINGLE & SAME SIGN-ON ASPECTS

SINGLE & SAME SIGN-ON ASPECTS SINGLE & SAME SIGN-ON ASPECTS OF AZURE ACTIVE DIRECTORY Harold Baele Senior ICT Trainer JULY 2, 2015 SLIDE 1 TRAINER INFO Harold Baele MCT at RealDolmen Education Harold.baele@realdolmen.com - @hbaele

More information

Sentinet for Windows Azure SENTINET

Sentinet for Windows Azure SENTINET Sentinet for Windows Azure SENTINET Sentinet for Windows Azure 1 Contents Introduction... 2 Customer Benefits... 2 Deployment Topologies... 3 Isolated Deployment Model... 3 Collocated Deployment Model...

More information

Implementing Microsoft Azure Infrastructure Solutions

Implementing Microsoft Azure Infrastructure Solutions Course 20533: Implementing Microsoft Azure Infrastructure Solutions Course details Course Outline Module 1: Introduction to Azure This module provides the students a high level introduction to Azure. Cloud

More information

Microsoft Enterprise Mobility Suite

Microsoft Enterprise Mobility Suite Microsoft Enterprise Mobility Suite Standalone - overview Peter Daalmans http://configmgrblog.com, peter@daalmans.com IT-Concern John Marcum Enterprise Client Management Architect / johnmarcum@outlook.com

More information

Whitepaper. December 14, SplashData, Inc. All rights reserved. v

Whitepaper. December 14, SplashData, Inc. All rights reserved. v 1 TeamsID Security Whitepaper December 14, 2015 2015 SplashData, Inc. All rights reserved. v2015.12 2 INTRODUCTION TeamsID is from SplashData, a company that has a well-established track record of delivering

More information

Ondřej Výšek Sales Lead, Microsoft MVP. vysek@kpcs.cz

Ondřej Výšek Sales Lead, Microsoft MVP. vysek@kpcs.cz Ondřej Výšek Sales Lead, Microsoft MVP vysek@kpcs.cz Azure Active Directory Features Free edition Basic edition Premium edition Directory as a service User and group management using UI or Windows PowerShell

More information

Healthcare: La sicurezza nel Cloud October 18, 2011. 2011 IBM Corporation

Healthcare: La sicurezza nel Cloud October 18, 2011. 2011 IBM Corporation Healthcare: La sicurezza nel Cloud October 18, 2011 Cloud Computing Tests The Limits Of Security Operations And Infrastructure Security and Privacy Domains People and Identity Data and Information Application

More information

Identity and Access Management for the Hybrid Enterprise

Identity and Access Management for the Hybrid Enterprise Identity and Access Management for the Hybrid Enterprise Redmond Identity Summit 2014 Directories Devices Identity Keith Brintzenhofe Microsoft Corporation Thank You to our Sponsors Gold Silver Plus Silver

More information

Course 20533: Implementing Microsoft Azure Infrastructure Solutions

Course 20533: Implementing Microsoft Azure Infrastructure Solutions Course 20533: Implementing Microsoft Azure Infrastructure Solutions Overview About this course This course is aimed at experienced IT Professionals who currently administer their on-premises infrastructure.

More information

<Insert Picture Here> Oracle Database Security Overview

<Insert Picture Here> Oracle Database Security Overview Oracle Database Security Overview Tammy Bednar Sr. Principal Product Manager tammy.bednar@oracle.com Data Security Challenges What to secure? Sensitive Data: Confidential, PII, regulatory

More information

MySQL Security: Best Practices

MySQL Security: Best Practices MySQL Security: Best Practices Sastry Vedantam sastry.vedantam@oracle.com Safe Harbor Statement The following is intended to outline our general product direction. It is intended for information purposes

More information

Microsoft Azure Fundamentals

Microsoft Azure Fundamentals Microsoft Azure Fundamentals 10979C - 2 Days - Instructor-led, Hands-on Introduction This course provides the underlying knowledge required by all individuals who will be evaluating Microsoft Azure, regardless

More information

Google Identity Services for work

Google Identity Services for work INTRODUCING Google Identity Services for work One account. All of Google Enter your email Next Online safety made easy We all care about keeping our data safe and private. Google Identity brings a new

More information

An Oracle White Paper June 2009. Oracle Database 11g: Cost-Effective Solutions for Security and Compliance

An Oracle White Paper June 2009. Oracle Database 11g: Cost-Effective Solutions for Security and Compliance An Oracle White Paper June 2009 Oracle Database 11g: Cost-Effective Solutions for Security and Compliance Protecting Sensitive Information Information ranging from trade secrets to financial data to privacy

More information

Implementing Microsoft Azure Infrastructure Solutions 20533B; 5 Days, Instructor-led

Implementing Microsoft Azure Infrastructure Solutions 20533B; 5 Days, Instructor-led Implementing Microsoft Azure Infrastructure Solutions 20533B; 5 Days, Instructor-led Course Description This course is aimed at experienced IT Professionals who currently administer their on-premises infrastructure.

More information

Protecting Sensitive Data Reducing Risk with Oracle Database Security

Protecting Sensitive Data Reducing Risk with Oracle Database Security Protecting Sensitive Data Reducing Risk with Oracle Database Security Antonio.Mata.Gomez@oracle.com Information Security Architect Agenda 1 2 Anatomy of an Attack Three Steps to Securing an Oracle Database

More information

Implementing Microsoft Azure Infrastructure Solutions

Implementing Microsoft Azure Infrastructure Solutions Course Code: M20533 Vendor: Microsoft Course Overview Duration: 5 RRP: 2,025 Implementing Microsoft Azure Infrastructure Solutions Overview This course is aimed at experienced IT Professionals who currently

More information

Course 20533B: Implementing Microsoft Azure Infrastructure Solutions

Course 20533B: Implementing Microsoft Azure Infrastructure Solutions Course 20533B: Implementing Microsoft Azure Infrastructure Solutions Sales 406/256-5700 Support 406/252-4959 Fax 406/256-0201 Evergreen Center North 1501 14 th St West, Suite 201 Billings, MT 59102 Course

More information

Creating a Single Sign on Web Portal using Azure. Robert Crane Office 365 MVP @directorcia

Creating a Single Sign on Web Portal using Azure. Robert Crane Office 365 MVP @directorcia Creating a Single Sign on Web Portal using Azure Robert Crane Office 365 MVP @directorcia Agenda What is Office 365? What is Azure? What is Single Sign on (SSO)? What is WAAD? Accessing your free WAAD

More information

Copyright 2013, Oracle and/or its affiliates. All rights reserved.

Copyright 2013, Oracle and/or its affiliates. All rights reserved. 1 Security Inside-Out with Oracle Database 12c Denise Mallin, CISSP Oracle Enterprise Architect - Security The following is intended to outline our general product direction. It is intended for information

More information

Security and Azure SQL Database

Security and Azure SQL Database Security and Azure SQL Database Technical white paper Authors: Joseph D'Antoni (Denny Cherry & Associates Consulting), Stacia Varga (Data Inspirations) Technical reviewers: Raul Garcia, Joachim Hammer,

More information

What s New in Centrify Privilege Service Centrify Identity Platform 15.4

What s New in Centrify Privilege Service Centrify Identity Platform 15.4 CENTRIFY PRIVILEGE SERVICE WHAT S NEW What s New in Centrify Privilege Service Centrify Identity Platform 15.4 Centrify Privilege Service Centrify Privilege Service is a cloud-based password and access

More information

Security It s an ecosystem thing

Security It s an ecosystem thing Security It s an ecosystem thing Joseph Alhadeff Vice President Global Public Policy, Chief Privacy Strategist The Security challenge in the before time. Today s Threat Environment

More information

Lync SHIELD Product Suite

Lync SHIELD Product Suite Lync SHIELD Product Suite The Natural Solution For Securing Lync Connectivity For today s mobile enterprise, the need to connect smartphones to the corporate network has become a vital business requirement.

More information

Identity & Access Management in the Cloud: Fewer passwords, more productivity

Identity & Access Management in the Cloud: Fewer passwords, more productivity WHITE PAPER Strategic Marketing Services Identity & Access Management in the Cloud: Fewer passwords, more productivity Cloud services are a natural for small and midsize businesses, with their ability

More information

Oracle Database 11g: Security

Oracle Database 11g: Security Oracle University Contact Us: +27 (0)11 319-4111 Oracle Database 11g: Security Duration: 5 Days What you will learn In Oracle Database 11g: Security course students learn how to use Oracle database features

More information

Sage Integration Cloud Technology Whitepaper

Sage Integration Cloud Technology Whitepaper Sage Integration Cloud Technology Whitepaper Sage Christian Rubach July 21, 2016 Abstract Sage is committed to providing businesses around the world the information, insight and tools they need to succeed.

More information

Security Considerations for DirectAccess Deployments. Whitepaper

Security Considerations for DirectAccess Deployments. Whitepaper Security Considerations for DirectAccess Deployments Whitepaper February 2015 This white paper discusses security planning for DirectAccess deployment. Introduction DirectAccess represents a paradigm shift

More information

Azure Active Directory

Azure Active Directory Azure Active Directory Your Cloud Identity Brian Mansure Azure Specialist bmansure@enpointe.com Agenda What Azure Active Directory is What Azure Active Directory is not Hybrid Identity Features Roadmap

More information

Next Generation Cloud BI: Tableau Server hosted on Microsoft Azure

Next Generation Cloud BI: Tableau Server hosted on Microsoft Azure Next Generation Cloud BI: Tableau Server hosted on Microsoft Azure Abstract Tableau and Microsoft Azure provide a comprehensive business intelligence solution that can be implemented quickly, secured easily,

More information

Assignment # 1 (Cloud Computing Security)

Assignment # 1 (Cloud Computing Security) Assignment # 1 (Cloud Computing Security) Group Members: Abdullah Abid Zeeshan Qaiser M. Umar Hayat Table of Contents Windows Azure Introduction... 4 Windows Azure Services... 4 1. Compute... 4 a) Virtual

More information

Cloud Security. Peter Jopling joplingp@uk.ibm.com IBM UK Ltd Software Group Hursley Labs. peterjopling. 2011 IBM Corporation

Cloud Security. Peter Jopling joplingp@uk.ibm.com IBM UK Ltd Software Group Hursley Labs. peterjopling. 2011 IBM Corporation Cloud Security Peter Jopling joplingp@uk.ibm.com IBM UK Ltd Software Group Hursley Labs peterjopling 2011 IBM Corporation Cloud computing impacts the implementation of security in fundamentally new ways

More information

Security Overview Enterprise-Class Secure Mobile File Sharing

Security Overview Enterprise-Class Secure Mobile File Sharing Security Overview Enterprise-Class Secure Mobile File Sharing Accellion, Inc. 1 Overview 3 End to End Security 4 File Sharing Security Features 5 Storage 7 Encryption 8 Audit Trail 9 Accellion Public Cloud

More information

SharePoint 2013 Business Connectivity Services Hybrid Overview

SharePoint 2013 Business Connectivity Services Hybrid Overview SharePoint 2013 Business Connectivity Services Hybrid Overview Christopher J Fox Microsoft Corporation November 2012 Applies to: SharePoint 2013, SharePoint Online Summary: A hybrid SharePoint environment

More information

Microsoft SQL Server Security and Auditing Clay Risenhoover ISACA North Texas April 14, 2016 http://tinyurl.com/isacaclay

Microsoft SQL Server Security and Auditing Clay Risenhoover ISACA North Texas April 14, 2016 http://tinyurl.com/isacaclay Microsoft SQL Server Security and Auditing Clay Risenhoover ISACA North Texas April 14, 2016 http://tinyurl.com/isacaclay 2016, Risenhoover Consulting, Inc. All Rights Reserved 1 Goals Understand new and

More information

Security Architecture Whitepaper

Security Architecture Whitepaper Security Architecture Whitepaper 2015 by Network2Share Pty Ltd. All rights reserved. 1 Table of Contents CloudFileSync Security 1 Introduction 1 Data Security 2 Local Encryption - Data on the local computer

More information

ABOUT TOOLS4EVER ABOUT DELOITTE RISK SERVICES

ABOUT TOOLS4EVER ABOUT DELOITTE RISK SERVICES CONTENTS About Tools4ever... 3 About Deloitte Risk Services... 3 HelloID... 4 Microsoft Azure... 5 HelloID Security Architecture... 6 Scenarios... 8 SAML Identity Provider (IDP)... 8 Service Provider SAML

More information

Oracle Database 11g: Security. What you will learn:

Oracle Database 11g: Security. What you will learn: Oracle Database 11g: Security What you will learn: In Oracle Database 11g: Security course students learn how they can use Oracle database features to meet the security, privacy and compliance requirements

More information

Oracle Database 11g: Security Release 2. Course Topics. Introduction to Database Security. Choosing Security Solutions

Oracle Database 11g: Security Release 2. Course Topics. Introduction to Database Security. Choosing Security Solutions Oracle Database 11g: Security Release 2 In this course, students learn how they can use Oracle Database features to meet the security, privacy and compliance requirements of their organization. The current

More information

Microsoft Azure. DataSync. ModernBiz

Microsoft Azure. DataSync. ModernBiz Microsoft Azure DataSync ModernBiz Agenda ModernBiz: Your path to the Modern Business Microsoft Azure overview Key business solutions leveraging the cloud Back up your data Reduce unexpected downtime Host

More information

Cloud aber Sicher. Florian van Keulen. Senior Consultant Cloud & Security

Cloud aber Sicher. Florian van Keulen. Senior Consultant Cloud & Security Cloud aber Sicher Florian van Keulen Senior Consultant Cloud & Security BASEL BERN BRUGG DÜSSELDORF FRANKFURT A.M. FREIBURG I.BR. GENEVA HAMBURG COPENHAGEN LAUSANNE MUNICH STUTTGART VIENNA ZURICH Since

More information

Secret Server Qualys Integration Guide

Secret Server Qualys Integration Guide Secret Server Qualys Integration Guide Table of Contents Secret Server and Qualys Cloud Platform... 2 Authenticated vs. Unauthenticated Scanning... 2 What are the Advantages?... 2 Integrating Secret Server

More information

Cloud Security Through Threat Modeling. Robert M. Zigweid Director of Services for IOActive

Cloud Security Through Threat Modeling. Robert M. Zigweid Director of Services for IOActive Cloud Security Through Threat Modeling Robert M. Zigweid Director of Services for IOActive 1 Key Points Introduction Threat Model Primer Assessing Threats Mitigating Threats Sample Threat Model Exercise

More information

MS 20533B - Implementing Microsoft Azure Infrastructure Solutions

MS 20533B - Implementing Microsoft Azure Infrastructure Solutions MS 20533B - Implementing Microsoft Azure Infrastructure Solutions COURSE OVERVIEW: This course is aimed at experienced IT Professionals who currently administer their on-premises infrastructure. The course

More information

SEC100 Secure Authentication and Data Transfer with SAP Single Sign-On. Public

SEC100 Secure Authentication and Data Transfer with SAP Single Sign-On. Public SEC100 Secure Authentication and Data Transfer with SAP Single Sign-On Public Speakers Las Vegas, Oct 19-23 Christian Cohrs, Area Product Owner Barcelona, Nov 10-12 Regine Schimmer, Product Management

More information

Tableau Server Security. Version 8.0

Tableau Server Security. Version 8.0 Version 8.0 Author: Marc Rueter Senior Director, Strategic Solutions, Tableau Software June 2013 p2 Today s enterprise class systems need to provide robust security in order to meet the varied and dynamic

More information

ProtectV. Securing Sensitive Data in Virtual and Cloud Environments. Executive Summary

ProtectV. Securing Sensitive Data in Virtual and Cloud Environments. Executive Summary VISIBILITY DATA GOVERNANCE SYSTEM OS PARTITION UNIFIED MANAGEMENT CENTRAL AUDIT POINT ACCESS MONITORING ENCRYPTION STORAGE VOLUME POLICY ENFORCEMENT ProtectV SECURITY SNAPSHOT (backup) DATA PROTECTION

More information

Security and Billing for Azure Pack. Presented by 5nine Software and Cloud Cruiser

Security and Billing for Azure Pack. Presented by 5nine Software and Cloud Cruiser Security and Billing for Azure Pack Presented by 5nine Software and Cloud Cruiser Meet our Speakers Symon Perriman VP of Business Development 5nine Software symon@5nine.com @SymonPerriman Paul Zinn Senior

More information

D50323GC20 Oracle Database 11g: Security Release 2

D50323GC20 Oracle Database 11g: Security Release 2 D50323GC20 Oracle Database 11g: Security Release 2 What you will learn In this course, you'll learn how to use Oracle Database features to meet the security, privacy and compliance requirements of their

More information

Gpass Security Whitepaper. November 29, SplashData, Inc. All rights reserved. v

Gpass Security Whitepaper. November 29, SplashData, Inc. All rights reserved. v 1 Gpass Security Whitepaper November 29, 2016 2016 SplashData, Inc. All rights reserved. v2016.11 2 INTRODUCTION Gpass is from SplashData, a company that has a well-established track record of delivering

More information

Securing sensitive data at Rest ProtectFile, ProtectDb and ProtectV. Nadav Elkabets Presale Consultant

Securing sensitive data at Rest ProtectFile, ProtectDb and ProtectV. Nadav Elkabets Presale Consultant Securing sensitive data at Rest ProtectFile, ProtectDb and ProtectV Nadav Elkabets Presale Consultant Protecting Your Data Encrypt Your Data 1 ProtectFile StorageSecure ProtectDB ProtectV Databases File

More information

Securing Office 365 with MobileIron

Securing Office 365 with MobileIron Securing Office 365 with MobileIron Introduction Office 365 is Microsoft s cloud-based productivity suite. It includes online versions of Microsoft s most popular solutions, like Exchange and SharePoint,

More information

CP003 Azure SQL Database V12 updates and comparison with SQL Server

CP003 Azure SQL Database V12 updates and comparison with SQL Server CP003 Azure SQL Database V12 updates and comparison with SQL Server presenta Francesco Diaz - @francedit francesco.diaz@insight.com http://francescodiaz.azurewebsites.net Data Platform Continuum SQL Database

More information

Discovering Azure AD Premium.

Discovering Azure AD Premium. Discovering Azure AD Premium. In this section we will start using AD Premium features, and see how it add value to our Company. Some Useful info for this article and related components. Lab Company Name:

More information

Digital Marketplace - G-Cloud

Digital Marketplace - G-Cloud Digital Marketplace - G-Cloud Managed Services, Cloud and infrastructure Core offer 7 services in this area: 1. Aurora Customisation Professional Services Core have over 10 years experience in identity

More information

05.0 Application Development

05.0 Application Development Number 5.0 Policy Owner Information Security and Technology Policy Application Development Effective 01/01/2014 Last Revision 12/30/2013 Department of Innovation and Technology 5. Application Development

More information

Securing the Journey to the Private Cloud. Dominique Dessy RSA, the Security Division of EMC

Securing the Journey to the Private Cloud. Dominique Dessy RSA, the Security Division of EMC Securing the Journey to the Private Cloud Dominique Dessy RSA, the Security Division of EMC June 2010 Securing the Journey to The Private Cloud The Journey IT Production Business Production IT-As-A-Service

More information

SAP Single Sign-On 2.0 Overview Presentation

SAP Single Sign-On 2.0 Overview Presentation SAP Single Sign-On 2.0 Overview Presentation March 2016 Public Agenda SAP security portfolio Overview SAP Single Sign-On Single sign-on main scenarios Capabilities Summary 2016 SAP SE or an SAP affiliate

More information

Windows Azure Pack Installation and Initial Configuration

Windows Azure Pack Installation and Initial Configuration Windows Azure Pack Installation and Initial Configuration Windows Server 2012 R2 Hands-on lab In this lab, you will learn how to install and configure the components of the Windows Azure Pack. To complete

More information

Table of Contents. FME Cloud Architecture Overview. Secure Operations. Application Security. Shared Responsibility.

Table of Contents. FME Cloud Architecture Overview. Secure Operations. Application Security. Shared Responsibility. FME Cloud Security Table of Contents FME Cloud Architecture Overview Secure Operations I. Backup II. Data Governance and Privacy III. Destruction of Data IV. Incident Reporting V. Development VI. Customer

More information

Please contact Cyber and Technology Training at (410)777-1333/technologytraining@aacc.edu for registration and pricing information.

Please contact Cyber and Technology Training at (410)777-1333/technologytraining@aacc.edu for registration and pricing information. Course Name Start Date End Date Start Time End Time Active Directory Services with Windows Server 8/31/2015 9/4/2015 9:00 AM 5:00 PM Active Directory Services with Windows Server 9/28/2015 10/2/2015 9:00

More information

Oracle Database 11g: Security Release 2

Oracle Database 11g: Security Release 2 Oracle University Contact Us: 1.800.529.0165 Oracle Database 11g: Security Release 2 Duration: 5 Days What you will learn In this course, you'll learn how to use Oracle Database features to meet the security,

More information

Hayri Tarhan, Sr. Manager, Public Sector Security, Oracle Ron Carovano, Manager, Business Development, F5 Networks

Hayri Tarhan, Sr. Manager, Public Sector Security, Oracle Ron Carovano, Manager, Business Development, F5 Networks EXTENDING ACCESS WHILE ENHANCING CONTROL FOR YOUR ORGANIZATION S DATA LEVERAGE THE POWER OF F5 AND ORACLE TO DELIVER SECURE ACCESS TO APPLICATIONS AND DATABASES Hayri Tarhan, Sr. Manager, Public Sector

More information

DreamFactory on Microsoft SQL Azure

DreamFactory on Microsoft SQL Azure DreamFactory on Microsoft SQL Azure Account Setup and Installation Guide For general information about the Azure platform, go to http://www.microsoft.com/windowsazure/. For general information about the

More information

<Insert Picture Here> Oracle Database Vault

<Insert Picture Here> Oracle Database Vault Oracle Database Vault Kamal Tbeileh Senior Principal Product Manager, Database Security The following is intended to outline our general product direction. It is intended for information

More information

Implementing Microsoft Azure Infrastructure Solutions

Implementing Microsoft Azure Infrastructure Solutions 20533B - Version: 1 02 July 2016 Implementing Microsoft Azure Infrastructure Solutions Implementing Microsoft Azure Infrastructure Solutions 20533B - Version: 1 5 days Course Description: This course is

More information

Developing Microsoft Azure Solutions 20532A; 5 days

Developing Microsoft Azure Solutions 20532A; 5 days Lincoln Land Community College Capital City Training Center 130 West Mason Springfield, IL 62702 217-782-7436 www.llcc.edu/cctc Developing Microsoft Azure Solutions 20532A; 5 days Course Description This

More information

Developing Microsoft Azure Solutions

Developing Microsoft Azure Solutions Course 20532A: Developing Microsoft Azure Solutions Page 1 of 7 Developing Microsoft Azure Solutions Course 20532A: 4 days; Instructor-Led Introduction This course is intended for students who have experience

More information

Authors Bram van Pelt Sander Mastwijk

Authors Bram van Pelt Sander Mastwijk AMIS Edisonbaan 15 Postbus 24 3430 AA Nieuwegein T +31(0) 30 601 60 00 E info@amis.nl I amis.nl BTW nummer NL8117.70.400.B69 KvK nummer 30114159 Statutair gevestigd te Enschede Whitepaper: How to reach

More information

Developing Microsoft Azure Solutions

Developing Microsoft Azure Solutions Course Duration: 5 Days About this Course This course is intended for students who have experience building vertically scaled applications. Students should also have experience with the Microsoft Azure

More information

Alliance Key Manager Cloud HSM Frequently Asked Questions

Alliance Key Manager Cloud HSM Frequently Asked Questions Key Management Alliance Key Manager Cloud HSM Frequently Asked Questions FAQ INDEX This document contains a collection of the answers to the most common questions people ask about Alliance Key Manager

More information

Building disaster-recovery solution using Azure Site Recovery (ASR) for Hyper-V (Part 1)

Building disaster-recovery solution using Azure Site Recovery (ASR) for Hyper-V (Part 1) Building disaster-recovery solution using Azure Site Recovery (ASR) for Hyper-V (Part 1) KR Kandavel Technical Solutions Professional Asia Azure Site Recovery Specialist Team Microsoft Corporation Hybrid

More information

Developing Microsoft Azure Solutions 20532B; 5 Days, Instructor-led

Developing Microsoft Azure Solutions 20532B; 5 Days, Instructor-led Developing Microsoft Azure Solutions 20532B; 5 Days, Instructor-led Course Description This course is intended for students who have experience building vertically scaled applications. Students should

More information

EXTENDING SINGLE SIGN-ON TO AMAZON WEB SERVICES

EXTENDING SINGLE SIGN-ON TO AMAZON WEB SERVICES pingidentity.com EXTENDING SINGLE SIGN-ON TO AMAZON WEB SERVICES Best practices for identity federation in AWS Table of Contents Executive Overview 3 Introduction: Identity and Access Management in Amazon

More information

Infrastructure for more security and flexibility to deliver the Next-Generation Data Center

Infrastructure for more security and flexibility to deliver the Next-Generation Data Center Infrastructure for more security and flexibility to deliver the Next-Generation Data Center Stefan Volmari Manager Systems Engineering Networking & Cloud Today's trends turn into major challenges Cloud

More information

Oracle Cloud 25.09.14. Bjarte Drivenes Enterprise Architect. Copyright 2014 Oracle and/or its affiliates. All rights reserved.

Oracle Cloud 25.09.14. Bjarte Drivenes Enterprise Architect. Copyright 2014 Oracle and/or its affiliates. All rights reserved. Oracle Cloud 25.09.14 Bjarte Drivenes Enterprise Architect Copyright 2014 Oracle and/or its affiliates. All rights reserved. Copyright 2014 Oracle and/or its affiliates. All rights reserved. Agenda Private

More information

A brief on Two-Factor Authentication

A brief on Two-Factor Authentication Application Note A brief on Two-Factor Authentication Summary This document provides a technology brief on two-factor authentication and how it is used on Netgear SSL312, VPN Firewall, and other UTM products.

More information

Okta/Dropbox Active Directory Integration Guide

Okta/Dropbox Active Directory Integration Guide Okta/Dropbox Active Directory Integration Guide Okta Inc. 301 Brannan Street, 3rd Floor San Francisco CA, 94107 info@okta.com 1-888- 722-7871 1 Table of Contents 1 Okta Directory Integration Edition for

More information

Identity Management in Liferay Overview and Best Practices. Liferay Portal 6.0 EE

Identity Management in Liferay Overview and Best Practices. Liferay Portal 6.0 EE Identity Management in Liferay Overview and Best Practices Liferay Portal 6.0 EE Table of Contents Introduction... 1 IDENTITY MANAGEMENT HYGIENE... 1 Where Liferay Fits In... 2 How Liferay Authentication

More information

Centrify Cloud Connector Deployment Guide

Centrify Cloud Connector Deployment Guide C E N T R I F Y D E P L O Y M E N T G U I D E Centrify Cloud Connector Deployment Guide Abstract Centrify provides mobile device management and single sign-on services that you can trust and count on as

More information

Big data variety, 179 velocity, 179 volume, 179 Blob storage containers

Big data variety, 179 velocity, 179 volume, 179 Blob storage containers Index A AADRM. See Azure active directory rights management (AADRM) AADRM PowerShell module Azure AD module, 164 Connect-AadrmService cmdlet, 164 Connect-MsolService cmdlet, 164 PowerShell v2.0 and.net

More information

SQL 2016 and SQL Azure

SQL 2016 and SQL Azure and SQL Azure Robin Cable Robin.Cable@TCSC.com BI Consultant AGENDA Azure SQL What's New in SQL 2016 Azure SQL Azure SQL Azure is a cloud based SQL service, provided to subscribers, to host their databases.

More information

Creating a Strong Security Infrastructure for Exposing JBoss Services

Creating a Strong Security Infrastructure for Exposing JBoss Services Creating a Strong Security Infrastructure for Exposing JBoss Services JBoss Enterprise SOA Platform Service Clients Service Gateway Enterprise Services Blake Dournaee, Product Management, Intel SOA Products

More information

FileCloud Security FAQ

FileCloud Security FAQ is currently used by many large organizations including banks, health care organizations, educational institutions and government agencies. Thousands of organizations rely on File- Cloud for their file

More information

Database Security SQL Server 2012

Database Security SQL Server 2012 Database Security SQL Server 2012 Russ McMahon Associate Prof of Information Technology CECH UC 1 of only 21 ABET accredited programs in the US Jasmine Hix Senior IT (Software Dev) Helped with the slides

More information

The Panoptix Building Efficiency Solution: Ensuring a Secure Delivery of Building Efficiency

The Panoptix Building Efficiency Solution: Ensuring a Secure Delivery of Building Efficiency logo The Panoptix Building Efficiency Solution: Ensuring a Secure Delivery of Building Efficiency Understanding the Multiple Levels of Security Built Into the Panoptix Solution Published: October 2011

More information

Developing Microsoft Azure Solutions

Developing Microsoft Azure Solutions Course M20532 5 Day(s) 30:00 Hours Developing Microsoft Azure Solutions Audience The candidates targeted by this training have basic experience in implementing and monitoring Microsoft Azure solutions.

More information

Alexander De Houwer Technology Advisor Devices Win 10 Vincent Dal Technology Advisor Business Productivity

Alexander De Houwer Technology Advisor Devices Win 10 Vincent Dal Technology Advisor Business Productivity Alexander De Houwer Technology Advisor Devices Win 10 Vincent Dal Technology Advisor Business Productivity Agenda INTRODUCTION (5 slides) WINDOWS 10 (10 slides) OFFICE 2016 (11 slides) Enterprise Mobility

More information

COMMVAULT SIMPANA 10 SOFTWARE MULTI-TENANCY FEATURES FOR SERVICE PROVIDERS

COMMVAULT SIMPANA 10 SOFTWARE MULTI-TENANCY FEATURES FOR SERVICE PROVIDERS COMMVAULT SIMPANA 10 SOFTWARE MULTI-TENANCY FEATURES FOR SERVICE PROVIDERS As cloud adoption continues to rise, so has the demand from Service Providers for software products that support their multi-tenant

More information

API Management: Powered by SOA Software Dedicated Cloud

API Management: Powered by SOA Software Dedicated Cloud Software Dedicated Cloud The Challenge Smartphones, mobility and the IoT are changing the way users consume digital information. They re changing the expectations and experience of customers interacting

More information

15 th January 2015. Microsoft Windows Azure

15 th January 2015. Microsoft Windows Azure 15 th January 2015 Microsoft Windows Azure The cloud platform for the modern business Microsoft Azure is a flexible cloud platform that helps you grow with greater efficiency and be more responsive to

More information

Intelligence. Productivity. Mobility. Unified Service. Predictive analytics: Offline mobile: Self, assisted & field service

Intelligence. Productivity. Mobility. Unified Service. Predictive analytics: Offline mobile: Self, assisted & field service Productivity Intelligence Mobility Unified Service Next generation productivity: Predictive analytics: Offline mobile: Self, assisted & field service Surface trending documents with Delve Immersive Excel

More information