Channel 9 - Entries tagged with Security Talk Microsoft http://mschnlnine.vo.llnwd.net/d1/Dev/App_Themes/C9/images/feedimage.png Channel 9 - Entries tagged with Security Talk http://channel9.msdn.com/Tags/security-talk Channel 9 keeps you up to date with the latest news and behind the scenes info from Microsoft that developers love to keep up with. From LINQ to SilverLight – Watch videos and hear about all the cool technologies coming and the people behind them. http://channel9.msdn.com/Tags/security-talk en Tue, 21 May 2013 23:42:59 GMT Tue, 21 May 2013 23:42:59 GMT Rev9 14 1 25 Microsoft Private Cloud Security Overview Nick Torkington, Security Architect with Microsoft Services, answers the most common security concerns CxOs and other business decision-makers have when evaluating the Microsoft platform to build a private Infrastructure as a Service (IaaS) cloud.

This video covers:
·        Building a secure private  cloud on Microsoft technologies, including how the Microsoft product stack implements IaaS cloud, clustering support, isolation capabilities and orchestration layer for task automation
·        Private cloud security concerns usually associated with IaaS cloud, and how Microsoft solution addresses them
·        Security & compliance in a Microsoft private cloud, including security update management and orchestration, proactive monitoring of infrastructure, malware and network protection and monitoring

Related Resources

·        Security Talk Series: Webcasts, Podcasts, Videos

·        Check out Windows Azure Subscriptions

]]> http://channel9.msdn.com/posts/Microsoft-Private-Cloud-Security-Overview Nick Torkington, Security Architect with Microsoft Services, answers the most common security concerns CxOs and other business decision-makers have when evaluating the Microsoft platform to build a private Infrastructure as a Service (IaaS) cloud. This video covers: ·        Building a secure private  cloud on Microsoft technologies, including how the Microsoft product stack implements IaaS cloud, clustering support, isolation capabilities and orchestration layer for task automation·        Private cloud security concerns usually associated with IaaS cloud, and how Microsoft solution addresses them·        Security & compliance in a Microsoft private cloud, including security update management and orchestration, proactive monitoring of infrastructure, malware and network protection and monitoring Related Resources ·        Security Talk Series: Webcasts, Podcasts, Videos ·        Check out Windows Azure Subscriptions 3284 http://channel9.msdn.com/posts/Microsoft-Private-Cloud-Security-Overview Wed, 04 May 2011 21:50:28 GMT http://channel9.msdn.com/posts/Microsoft-Private-Cloud-Security-Overview Larry Larsen Larry Larsen 4 http://channel9.msdn.com/posts/Microsoft-Private-Cloud-Security-Overview/rss Azure Security Talk Microsoft SDL Requirements Phase – Security Practices Chris and Robert explain the benefits of following the Microsoft SDL to building more secure, reliable, and
standard-compliant software.

]]> http://channel9.msdn.com/posts/Microsoft-SDL-Requirements-Phase--Security-Practices Chris and Robert explain the benefits of following the Microsoft SDL to building more secure, reliable, and standard-compliant software. 751 http://channel9.msdn.com/posts/Microsoft-SDL-Requirements-Phase--Security-Practices Wed, 27 Apr 2011 21:34:00 GMT http://channel9.msdn.com/posts/Microsoft-SDL-Requirements-Phase--Security-Practices Larry Larsen Larry Larsen 0 http://channel9.msdn.com/posts/Microsoft-SDL-Requirements-Phase--Security-Practices/rss Simple DirectMedia Layer Security Talk Applying SDL Requirements practices within Windows Azure Robert Mooney and Chris Weber explain the similarities and differences in planning for security and privacy when
deploying to Windows Azure, and explain how to map the existing and new risks to the cloud-based environment.    

]]> http://channel9.msdn.com/posts/Applying-SDL-Requirements-practices-within-Windows-Azure Robert Mooney and Chris Weber explain the similarities and differences in planning for security and privacy whendeploying to Windows Azure, and explain how to map the existing and new risks to the cloud-based environment.     1027 http://channel9.msdn.com/posts/Applying-SDL-Requirements-practices-within-Windows-Azure Tue, 26 Apr 2011 17:04:47 GMT http://channel9.msdn.com/posts/Applying-SDL-Requirements-practices-within-Windows-Azure Larry Larsen Larry Larsen 0 http://channel9.msdn.com/posts/Applying-SDL-Requirements-practices-within-Windows-Azure/rss Security Talk Windows Azure Platform Security Essentials: Module 6 – Windows Azure Role Security Graham Calladine, Security Architect with Microsoft Services, joins us to talk about an ITPro-focused overview of the securing Windows Azure roles, certificates, endpoints, storage accounts and operations.

You’ll learn about:

  • Specifics of securing various types of Windows Azure roles (Web, Worker, VM)
  • Provisioning role instances
  • Certificate management, creation, deployment, rollback
  • Configuring public and private endpoints
  • Code access security ramifications for .NET Applications
  • Management of the VM Resources in the cloud, including MMC, PowerShell, Remote Desktop
  • Upgrading applications

Related Resources

]]> http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-6--Windows-Azure-Role-Security Graham Calladine, Security Architect with Microsoft Services, joins us to talk about an ITPro-focused overview of the securing Windows Azure roles, certificates, endpoints, storage accounts and operations. You’ll learn about: Specifics of securing various types of Windows Azure roles (Web, Worker, VM) Provisioning role instances Certificate management, creation, deployment, rollback Configuring public and private endpoints Code access security ramifications for .NET Applications Management of the VM Resources in the cloud, including MMC, PowerShell, Remote Desktop Upgrading applications Related Resources Windows Azure Security OverviewMicrosoft Compliance Framework for Online ServicesMicrosoft Security Development LifecycleSecurity Talk Series: Webcasts, Podcasts, VideosCheck out Windows Azure Subscriptions 2485 http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-6--Windows-Azure-Role-Security Mon, 18 Apr 2011 21:34:28 GMT http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-6--Windows-Azure-Role-Security Larry Larsen Larry Larsen 0 http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-6--Windows-Azure-Role-Security/rss Security Talk Windows Azure Platform Security Essentials for Business Decision Makers Graham Calladine, Security Architect with Microsoft Services, answers the most common security concerns CxOs and other business decision-makers have regarding the security of their data in Windows Azure cloud platform.

You’ll learn about:

  • The security controls that Azure has in place to help protect the customer applications and data
  • An overview of the Windows Azure components (web role, worker role, VM role)
  • A brief description of physical data storage and replication capabilities associated with Windows Azure Storage
  • Security design aspects of Azure infrastructure
  • Microsoft datacenter security and compliance

The updates in the video include:

  • Overview of the new platform features announced at PDC 2010
  • Introduction to the VM Role
  • Brief overview of Windows Azure Connect on-prem/off-prem networking bridge

Related Resources

]]> http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-for-Business-Decision-Makers Graham Calladine, Security Architect with Microsoft Services, answers the most common security concerns CxOs and other business decision-makers have regarding the security of their data in Windows Azure cloud platform. You’ll learn about: The security controls that Azure has in place to help protect the customer applications and data An overview of the Windows Azure components (web role, worker role, VM role) A brief description of physical data storage and replication capabilities associated with Windows Azure Storage Security design aspects of Azure infrastructure Microsoft datacenter security and compliance The updates in the video include: Overview of the new platform features announced at PDC 2010 Introduction to the VM Role Brief overview of Windows Azure Connect on-prem/off-prem networking bridge Related Resources Windows Azure Security OverviewMicrosoft Compliance Framework for Online ServicesMicrosoft Security Development LifecycleSecurity Talk Series: Webcasts, Podcasts, VideosCheck out Windows Azure Subscriptions 1574 http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-for-Business-Decision-Makers Sun, 03 Apr 2011 11:06:45 GMT http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-for-Business-Decision-Makers Larry Larsen Larry Larsen 3 http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-for-Business-Decision-Makers/rss Security Talk Windows Azure Platform Security Essentials for Technical Decision Makers Graham Calladine, Security Architect with Microsoft Services, answers the most common security concerns CxOs and other technical decision-makers have regarding the security of their data in Windows Azure cloud platform.

You’ll learn about:

  • The security controls that Azure has in place to help protect the customer applications and data
  • An architecture overview of the Windows Azure components (web role, worker role, VM role)
  • An architecture overview of each of the Windows Azure Storage components (blobs, tables, queues and drives)
  • SQL Azure security, including similarities and differences with SQL Server
  • Microsoft datacenter security and compliance

The updates in the video include:

  • Overview of features announced at PDC 2010
  • Introduction to the VM Role
  • Announcement of the Windows Server 2008 R2 (OS Family = 2) as an option for the guest operating system
  • An overview of the Windows Azure Connect
  • Fault domains and their role in improving reliability of Windows Azure applications
  • SQL Azure write replication to improve data security and reliability

Related Resources

 

]]> http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-for-Technical-Decision-Makers Graham Calladine, Security Architect with Microsoft Services, answers the most common security concerns CxOs and other technical decision-makers have regarding the security of their data in Windows Azure cloud platform. You’ll learn about: The security controls that Azure has in place to help protect the customer applications and data An architecture overview of the Windows Azure components (web role, worker role, VM role) An architecture overview of each of the Windows Azure Storage components (blobs, tables, queues and drives) SQL Azure security, including similarities and differences with SQL Server Microsoft datacenter security and compliance The updates in the video include: Overview of features announced at PDC 2010 Introduction to the VM Role Announcement of the Windows Server 2008 R2 (OS Family = 2) as an option for the guest operating system An overview of the Windows Azure Connect Fault domains and their role in improving reliability of Windows Azure applications SQL Azure write replication to improve data security and reliability Related Resources Windows Azure Security OverviewMicrosoft Compliance Framework for Online ServicesMicrosoft Security Development LifecycleSecurity Talk Series: Webcasts, Podcasts, VideosCheck out Windows Azure Subscriptions  2864 http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-for-Technical-Decision-Makers Mon, 28 Mar 2011 16:40:27 GMT http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-for-Technical-Decision-Makers Larry Larsen Larry Larsen 1 http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-for-Technical-Decision-Makers/rss Security Talk Windows Azure Platform Security Essentials: Module 5 - Secure Networking using Windows Azure Connect Graham Calladine, Security Architect with Microsoft Services, provides detailed description of Windows Azure Connect, a new mechanism for establishing, managing and securing IP-level connectivity between on-premises and Windows Azure resources.

You’ll learn about:

  • Potential usage scenarios of Windows Azure Connect
  • Descriptions of the different components of Windows Azure Connect, including client software, relay service, name resolution service, networking policy model
  • Management overview
  • Joining your cloud-based virtual machines to Active Directory

Related Resources:

 

]]> http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-5-Secure-Networking-using-Windows-Azure-Connect Graham Calladine, Security Architect with Microsoft Services, provides detailed description of Windows Azure Connect, a new mechanism for establishing, managing and securing IP-level connectivity between on-premises and Windows Azure resources. You’ll learn about: Potential usage scenarios of Windows Azure Connect Descriptions of the different components of Windows Azure Connect, including client software, relay service, name resolution service, networking policy model Management overview Joining your cloud-based virtual machines to Active Directory Related Resources: Windows Azure Security OverviewMicrosoft Compliance Framework for Online ServicesMicrosoft Security Development LifecycleSecurity Talk Series: Webcasts, Podcasts, VideosCheck out Windows Azure Subscriptions  1609 http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-5-Secure-Networking-using-Windows-Azure-Connect Mon, 21 Mar 2011 22:03:53 GMT http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-5-Secure-Networking-using-Windows-Azure-Connect Larry Larsen Larry Larsen 3 http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-5-Secure-Networking-using-Windows-Azure-Connect/rss Azure Security Talk Win4dows Azure Platform Security Essentials: Module 4 – Secure Development Graham Calladine, Security Architect with Microsoft Services partners with the Security Talk Series to describe the best practices for designing and deployment secure applications in the Azure platform.

Related resources:

Check out Windows Azure Subscriptions

]]> http://channel9.msdn.com/posts/Win4dows-Azure-Platform-Security-Essentials-Module-4--Secure-Development Graham Calladine, Security Architect with Microsoft Services partners with the Security Talk Series to describe the best practices for designing and deployment secure applications in the Azure platform. Related resources: Whitepaper: Security Best Practices for Developing Windows Azure Applicationshttp://go.microsoft.com/?linkid=9751872   Microsoft Security Development Lifecycle http://www.microsoft.com/security/sdlSecurity Talk Series webcasts www.microsoft.com/events/series/securitytalk.aspx  Check out Windows Azure Subscriptions 2226 http://channel9.msdn.com/posts/Win4dows-Azure-Platform-Security-Essentials-Module-4--Secure-Development Fri, 28 Jan 2011 17:48:32 GMT http://channel9.msdn.com/posts/Win4dows-Azure-Platform-Security-Essentials-Module-4--Secure-Development Larry Larsen Larry Larsen 1 http://channel9.msdn.com/posts/Win4dows-Azure-Platform-Security-Essentials-Module-4--Secure-Development/rss Security Talk Windows Azure Platform Security Essentials: Module 3 – Storage Access Graham Calladine, Security Architect with Microsoft Services partners with the Security Talk Series to describe the options for controlling access to information stored in Windows Azure Storage or in SQL Azure.

Related resources:

Check out Windows Azure Subscriptions

]]> http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-3--Storage-Access Graham Calladine, Security Architect with Microsoft Services partners with the Security Talk Series to describe the options for controlling access to information stored in Windows Azure Storage or in SQL Azure. Related resources: Whitepaper: Security Best Practices for Developing Windows Azure Applicationshttp://go.microsoft.com/?linkid=9751872   Microsoft Security Development Lifecycle http://www.microsoft.com/security/sdlSecurity Talk Series webcasts www.microsoft.com/events/series/securitytalk  Check out Windows Azure Subscriptions 1355 http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-3--Storage-Access Sat, 15 Jan 2011 18:48:07 GMT http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-3--Storage-Access Larry Larsen Larry Larsen 2 http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-3--Storage-Access/rss Security Talk Windows Azure Platform Security Essentials: Module 2 – Identity Access Management Graham Calladine, Security Architect with Microsoft Services partners with the Security Talk Series to describe the use of claims-based authentication to allow Active Directory and other on-premises identity providers to be used by
Azure applications. 

Related resources:

]]> http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-2--Identity-Access-Management Graham Calladine, Security Architect with Microsoft Services partners with the Security Talk Series to describe the use of claims-based authentication to allow Active Directory and other on-premises identity providers to be used byAzure applications.  Related resources: Whitepaper: Security Best Practices for Developing Windows Azure Applications http://go.microsoft.com/?linkid=9751872Microsoft Security Development Lifecycle http://www.microsoft.com/security/sdl Security Talk Series webcasts: www.microsoft.com/events/series/securitytalk  Check out Windows Azure Subscriptions bit.ly/AzurePromo 1991 http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-2--Identity-Access-Management Sun, 26 Dec 2010 16:30:28 GMT http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-2--Identity-Access-Management Larry Larsen Larry Larsen 1 http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-2--Identity-Access-Management/rss Security Talk Windows Azure Platform Security Essentials: Module 1 – Security Architecture Graham Calladine, Security Architect with Microsoft Services partners with the Security Talk Series to describe the security features of the Windows Azure platform, resources available to protect applications and data running on the Microsoft cloud and SQL Azure security and authentication options.

Related resources:

Check out Windows Azure Subscriptions bit.ly/AzurePromo

]]> http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-1--Security-Architecture Graham Calladine, Security Architect with Microsoft Services partners with the Security Talk Series to describe the security features of the Windows Azure platform, resources available to protect applications and data running on the Microsoft cloud and SQL Azure security and authentication options.Related resources: Whitepaper: Security Best Practices for Developing Windows Azure Applicationshttp://go.microsoft.com/?linkid=9751872Microsoft Security Development Lifecycle http://www.microsoft.com/security/sdl Security Talk Series webcasts: www.microsoft.com/events/series/securitytalkCheck out Windows Azure Subscriptions bit.ly/AzurePromo 2908 http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-1--Security-Architecture Fri, 24 Dec 2010 06:03:07 GMT http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-1--Security-Architecture Larry Larsen Larry Larsen 1 http://channel9.msdn.com/posts/Windows-Azure-Platform-Security-Essentials-Module-1--Security-Architecture/rss Security Talk Quest Software's Azure Services In this interview, Dmitry Sotnikov (Director of Cloud Solutions) and Einar Mykletun (Security and Compliance Architect) from Quest Software discuss building Quest’s new OnDemand product line – cloud-based IT management services to help IT professionals manage their on-premise Active Directory and server infrastructure. We talk about what it took to build the services on top of the Windows Azure platform, focusing specifically on security.

Quest is an early adopter of the Windows Azure platform.  They’ve built out an extensive services framework as well as a few initial service offerings that sits on top of Windows Azure Framework and Windows Identity Framework. One of the key elements in the design of Quest’s framework is secure communication and authentication between all the service components and layers, whereby encryption is based on certificates stored within the dedicated certificate store provided by Windows Azure. On this topic, Einar explains similarities between developing software for on-premises and in Windows Azure as well as highlights a few key differences.

Meanwhile, Dmitry dives into benefits of claims based authentication and authorization which is leveraged by Quest’s OnDemand solutions, shows that customer’s Security Token Service (STS) can be interconnected with other, public STS systems to provide access to the cloud-based solutions. Dmitry shows us a few key code samples from Quest’s STS implementation highlighting the use of Windows Identity Foundation (WIF) classes and Einar shows code necessary to implement STS federation for Quest’s SSO for existing Quest support customers.

Finally, our guests talk about Quest Software benefits from Windows Azure datacenter, such as security, recoverability, replication and compliance when building solutions on top of Windows Azure platform, and how customers’ internal networks can actually be MORE secure if they adopt the Quest OnDemand Log Management service built on top of Windows Azure.

Listen to the interview and then:

]]> http://channel9.msdn.com/posts/Quest-Softwares-Azure-Services In this interview, Dmitry Sotnikov (Director of Cloud Solutions) and Einar Mykletun (Security and Compliance Architect) from Quest Software discuss building Quest’s new OnDemand product line – cloud-based IT management services to help IT professionals manage their on-premise Active Directory and server infrastructure. We talk about what it took to build the services on top of the Windows Azure platform, focusing specifically on security. Quest is an early adopter of the Windows Azure platform.  They’ve built out an extensive services framework as well as a few initial service offerings that sits on top of Windows Azure Framework and Windows Identity Framework. One of the key elements in the design of Quest’s framework is secure communication and authentication between all the service components and layers, whereby encryption is based on certificates stored within the dedicated certificate store provided by Windows Azure. On this topic, Einar explains similarities between developing software for on-premises and in Windows Azure as well as highlights a few key differences. Meanwhile, Dmitry dives into benefits of claims based authentication and authorization which is leveraged by Quest’s OnDemand solutions, shows that customer’s Security Token Service (STS) can be interconnected with other, public STS systems to provide access to the cloud-based solutions. Dmitry shows us a few key code samples from Quest’s STS implementation highlighting the use of Windows Identity Foundation (WIF) classes and Einar shows code necessary to implement STS federation for Quest’s SSO for existing Quest support customers. Finally, our guests talk about Quest Software benefits from Windows Azure datacenter, such as security, recoverability, replication and compliance when building solutions on top of Windows Azure platform, and how customers’ internal networks can actually be MORE secure if they adopt the Quest OnDemand Log Management service built on top of Windows Azure. Listen to 1038 http://channel9.msdn.com/posts/Quest-Softwares-Azure-Services Thu, 28 Oct 2010 00:38:26 GMT http://channel9.msdn.com/posts/Quest-Softwares-Azure-Services Larry Larsen Larry Larsen 4 http://channel9.msdn.com/posts/Quest-Softwares-Azure-Services/rss Security Talk Security Talk Series: Using the SDL in Office 2010 2010 or 2007. ]]> http://channel9.msdn.com/Blogs/LarryLarsen/Security-Talk-Series-Using-the-SDL-in-Office-2010 In this video, Didier Vandenbroeck, TWC Security Lead PM, goes over how the SDL helped improve Office 2010 security, showing how one specific feature should improve both security and user productivity when opening files. Learn how the SDL can be used for large products to deliver more secure products. For more SDL usage in Office, check out the whitepaper on Office 2010 or 2007. 1817 http://channel9.msdn.com/Blogs/LarryLarsen/Security-Talk-Series-Using-the-SDL-in-Office-2010 Tue, 15 Jun 2010 00:31:00 GMT http://channel9.msdn.com/Blogs/LarryLarsen/Security-Talk-Series-Using-the-SDL-in-Office-2010 Larry Larsen Larry Larsen 2 http://channel9.msdn.com/Blogs/LarryLarsen/Security-Talk-Series-Using-the-SDL-in-Office-2010/RSS Office 2010 Simple DirectMedia Layer Security Security Talk Security Talk: Simplified SDL with David Ladd The Microsoft Security Development Lifecycle (SDL) is the software development security assurance process used at Microsoft. With the release of the Simplified Implementation of the Microsoft SDL guidance paper, the Microsoft SDL team provides guidance to organizations on the core elements and security activities of the Microsoft SDL to be performed in order to improve their own software development process.

Download the Simplified Implementation of the Microsoft SDL here.

]]> http://channel9.msdn.com/Blogs/LarryLarsen/Security-Talk-Simplified-SDL-with-David-Ladd The Microsoft Security Development Lifecycle (SDL) is the software development security assurance process used at Microsoft. With the release of the Simplified Implementation of the Microsoft SDL guidance paper, the Microsoft SDL team provides guidance to organizations on the core elements and security activities of the Microsoft SDL to be performed in order to improve their own software development process. Download the Simplified Implementation of the Microsoft SDL here. 366 http://channel9.msdn.com/Blogs/LarryLarsen/Security-Talk-Simplified-SDL-with-David-Ladd Fri, 14 May 2010 19:55:00 GMT http://channel9.msdn.com/Blogs/LarryLarsen/Security-Talk-Simplified-SDL-with-David-Ladd Larry Larsen Larry Larsen 0 http://channel9.msdn.com/Blogs/LarryLarsen/Security-Talk-Simplified-SDL-with-David-Ladd/RSS Simple DirectMedia Layer Security Security Talk Team Foundation Server 2010