Published by Microsoft Press (December 26, 2022) © 2023

Michael Howard | Simone Curzi | Heinrich Gantenbein
    VitalSource eTextbook (Lifetime access)
    €34,99
    Adding to cart… The item has been added
    ISBN-13: 9780137908684

    Designing and Developing Secure Azure Solutions ,1st edition

    Language: English

    Plan, build, and maintain highly secure Azure applications and workloads

    As business-critical applications and workloads move to the Microsoft Azure cloud, they must stand up against dangerous new threats. That means you must build robust security into your designs, use proven best practices across the entire development lifecycle, and combine multiple Azure services to optimize security. Now, a team of leading Azure security experts shows how to do just that. Drawing on extensive experience securing Azure workloads, the authors present a practical tutorial for addressing immediate security challenges, and a definitive design reference to rely on for years. Learn how to make the most of the platform by integrating multiple Azure security technologies at the application and network layers— taking you from design and development to testing, deployment, governance, and compliance.

    About You

    This book is for all Azure application designers, architects, developers, development managers, testers, and everyone who wants to make sure their cloud designs and code are as secure as possible.

    Discover powerful new ways to:

    • Improve app / workload security, reduce attack surfaces, and implement zero trust in cloud code
    • Apply security patterns to solve common problems more easily
    • Model threats early, to plan effective mitigations
    • Implement modern identity solutions with OpenID Connect and OAuth2
    • Make the most of Azure monitoring, logging, and Kusto queries
    • Safeguard workloads with Azure Security Benchmark (ASB) best practices
    • Review secure coding principles, write defensive code, fix insecure code, and test code security
    • Leverage Azure cryptography and confidential computing technologies
    • Understand compliance and risk programs
    • Secure CI / CD automated workflows and pipelines
    • Strengthen container and network security

    PART I SECURITY PRINCIPLES

    CHAPTER 1 Secure development lifecycle processes

    CHAPTER 2 Secure design

    CHAPTER 3 Security patterns

    CHAPTER 4 Threat modeling

    CHAPTER 5 Identity, authentication, and authorization

    CHAPTER 6 Monitoring and auditing

    CHAPTER 7 Governance

    CHAPTER 8 Compliance and risk programs

     

    PART II SECURE IMPLEMENTATION

    CHAPTER 9 Secure coding

    CHAPTER 10 Cryptography in Azure

    CHAPTER 11 Confidential computing

    CHAPTER 12 Container security

    CHAPTER 13 Database security

    CHAPTER 14 CI/CD security

    CHAPTER 15 Network security

    Appendix A: Core cryptographic techniques