powerful and effective security in azure...insecure subnet unencrypted sql server pci non-compliance...

10TH ANNUAL CONFERENCE ABOUT MODERN IT TECHNOLOGIES

Powerful and Effective

Security In Azure


Thank you Sponsors #ThriveITconf

Silver

Evening event sponsor

Material

Media

http://www.racunalniske-novice.com/

Increasing complexity

Evolving threats

Talent gap

Rising costs

By 2021, 25% of the world's personal data will be compromised and housed in a Data Lake analyzed and utilized by consortiums of Threat Actors*

!On-premises Cloud

The security landscape

*Source: IDC FutureScape: Worldwide Security Products and Services

https://www.idc.com/getfile.dyn?sectionId=49514734&containerId=US43286117&elementId=54692805&attachmentId=47304068

AzureMicrosoft Azure

Built-in controls

Unmatched security across operations, technology, and partnerships

$1B annual investment in cybersecurity

3500+ global security experts

Trillions of diverse signals for unique intelligence

Secure foundation and intelligence

For a heterogeneous world

Technology

Identity & access management

Data SecurityNetwork Security managemen

t

Threat protection

Visibility into security and compliance

Increase in number and sophistication of attacks Insecure configurations

Without security controls in

place, 68% of breaches take

months or longer to discover.

With cyber attacks on the rise, successful breaches per company each year has risen more than 27%, from an average of 102 to 130.**

Cloud security challenges

!

*Source: Verizon’s 2017 Data Breach Investigations Report

**Source: Ponemon: 2017 Cost of Cybercrime Study

http://www.verizonenterprise.com/verizon-insights-lab/dbir/2017/

The cloud kill chain model

© Microsoft Corporation Azure

Exposure

Insecurely configured applications

Infected admin

Vulnerabilities

Access

Virtual machines

Web apps

Credentials

Brute force attacks

Lateral movements

Virtual machines

Web apps

SQL databases

Actions

Data loss

Data exfiltration

Get secure faster

Azure Security Center

Strengthen security posture

Cloud security posture management

Secure Score

Policies and compliance

Protect against threats

For servers

For cloud native workloads

For databases

and storage

Workspace Machine Learning

Security management


Overview Dashboard


Data / control feed

On-prem & multi cloud

Azure

ASC

IaaS

VM on

VMware

ASC

PaaS

VM on

Hyper-V

ASC

TI & network data

AWS

agent

Azure Security Center Architecture


For servers


For databases

and storage

Get secure faster



Secure Score



Prioritize your response to security issues with Secure Score

Gain instant insight into the security state of your cloud workloads

Address security vulnerabilities with prioritized recommendations

Improve your Secure Score and overall security posture in minutes

679

+50 +40 +5 +8 +11

Manage organizational security policies and assess compliance in minutes

Manage security policies at an organizational level

Easily set security policies for subscriptions or management groups

Instantly understand your current policy compliance and review compliance overtime

Highly Dynamic Environment

New machine

without AV

Insecure

Subnet

Unencrypted

SQL server

PCI Non-

compliance

Remote

connection

left open

! ! ! ! !

Get secure faster




Secure Score



For servers


For databases

and storage

Protect Linux and Windows servers from threats

Use Just-in-Time VM to control access to commonly attacked management ports

Enable controls to block malicious applications, especially those missed by antimalware solutions, from running

Protect Windows servers and clients with the integration of Windows Defender ATP and Linux servers

Antimalware

Defender ATP

!

Behavior analytics

!

App whitelisting

!

Lateral Movement

Data exfiltration

Malicious code execution

On-premiseAzure, AWS, and GCP

Protect cloud-native services from threats

VMSS ContainersAzure Web Apps

Detect and alert on abnormal admin behavior or compromised web applications

Protects VMSS and containers from malicious attacks

! !!

Protect data services from threats


Detect attacks targeting your SQL databases, My SQL, PostgreSQL, and storage accounts

Mitigate threats targeting your Azure SQL databases and configure security best practices

Discover, classify, label and protect sensitive data in your databases

!Azure

StorageSQL MySQL

Get secure faster




Secure Score



For servers


For databases

and storage

Get secure faster

Automatically discover and onboard Azure resources

Gain a unified view of security across your hybrid cloud workloads

Integrate with existing SIEM or partner solutions to streamline threat mitigation

Assess compliance in a click

Unified console for on-prem + Azure servers

SIEM

ASC service

(machine learning)

Azure

On Prem & multi-cloud

ASC

Get secure faster

Features

Free

(Azure resources only)

Standard

(Hybrid incl. Azure)

Security policy, assessment, and recommendations

Connected partner solutions

Just-in-time VM Access --

Adaptive application controls --

File integrity monitoring --

Advanced threat detection for networks, VMs/servers,

and Azure services--

Threat intelligence --

Virtual machines

App Services

SQL databases

Price Free $15 / node / month

Pricing

Get secure faster




Secure Score



For servers


For databases

and storage

How to start?

To learn more, visit azure.microsoft.com/en-us/services/security-center/

Enable Azure Security Center to assess your

secure score

Onboard on-premises and other cloud workloads

Start trial for Security Center standard to get advanced

threat protection


THANK YOU

powerful and effective security in azure...insecure subnet unencrypted sql server pci non-compliance...

Documents