Windows Azure Learning Plan - Security
- by BuckWoody
This is one in a series of posts on a Windows Azure Learning Plan. You can find the main post here. This one deals with Security for Windows Azure.
General Security Information
Overview and general information about Windows Azure Security - what it is, how it works, and where you can learn more.
General Security Whitepaper – answers most questions
http://blogs.msdn.com/b/usisvde/archive/2010/08/10/security-white-paper-on-windows-azure-answers-many-faq.aspx
Windows Azure Security Notes from the Patterns and Practices site
http://blogs.msdn.com/b/jmeier/archive/2010/08/03/now-available-azure-security-notes-pdf.aspx
Overview of Azure Security
http://www.windowsecurity.com/articles/Microsoft-Azure-Security-Cloud.html
Azure Security Resources
http://reddevnews.com/articles/2010/08/19/microsoft-releases-windows-azure-security-resources.aspx
Cloud Computing Security Considerations
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=68fedf9c-1c27-4642-aa5b-0a34472303ea&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+MicrosoftDownloadCenter+%28Microsoft+Download+Center
Security in Cloud Computing – a Microsoft Perspective
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=7c8507e8-50ca-4693-aa5a-34b7c24f4579&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+MicrosoftDownloadCenter+%28Microsoft+Download+Center
Physical Security for Microsoft’s Online Computing
Information on the Infrastructure and Locations for Azure Physical Security.
The Global Foundation Services Group at Microsoft handles physical security
http://www.globalfoundationservices.com/security/index.html
Microsoft’s Security Response Center
http://www.microsoft.com/security/msrc/
Software Security for Microsoft’s Online Computing
Steps we take as a company to develop secure software
Windows Azure is developed using the Trustworthy Computing Initiative
http://www.microsoft.com/about/twc/en/us/default.aspx and
http://msdn.microsoft.com/en-us/library/ms995349.aspx
Identity and Access in the Cloud
http://blogs.msdn.com/b/technology_titbits_by_rajesh_makhija/archive/2010/10/29/identity-and-access-in-the-cloud.aspx
Security Steps you should take
While Microsoft takes great pains to secure the infrastructure, platform and code for Windows Azure, you have a responsibility to write secure code. These pointers can help you do that.
Securing your cloud architecture, step-by-step
http://technet.microsoft.com/en-us/magazine/gg296364.aspx
Security Guidelines for Windows Azure
http://redmondmag.com/articles/2010/06/15/microsoft-issues-security-guidelines-for-windows-azure.aspx
Best Practices for Windows Azure Security
http://blogs.msdn.com/b/vbertocci/archive/2010/06/14/security-best-practices-for-developing-windows-azure-applications.aspx
Active Directory and Windows Azure
http://blogs.msdn.com/b/plankytronixx/archive/2010/10/22/projecting-your-active-directory-identity-to-the-azure-cloud.aspx
Understanding Encryption (great overview and tutorial)
http://blogs.msdn.com/b/plankytronixx/archive/2010/10/23/crypto-primer-understanding-encryption-public-private-key-signatures-and-certificates.aspx
Securing your Connection Strings (SQL Azure)
http://blogs.msdn.com/b/sqlazure/archive/2010/09/07/10058942.aspx
Getting started with Windows Identity Foundation (WIF) quickly
http://blogs.msdn.com/b/alikl/archive/2010/10/26/windows-identity-foundation-wif-fast-track.aspx
