Czy platforma Microsoft Azure jest biznesowo bezpieczna? Tobiasz Janusz Koprowski
{o mnie słów kilka}!" #$%&''#()$#)*+,,-,!.!,/0! 1!- $2#3#4523 #!#,1#,,!#$6#,($ (*(6.,,!2/!2#/,,1,!2#.2,$2#,5/7#62,5#(*7#8$'9' *5#:)#,,5$3#;<5# $!7<=, $ ><; 0!5,6$$?@,,$3$A$$B6C,5,2,0 7$( 0@6 )6*2$,,*@ (* DD65<7<)@ (* 0$$5'9' 0$$$E6@ 82, 0/22,/0,A6#;FC 0 5/A/2,!2C
{get: CERT}! 7 7$ 7*25$, 7(* 765$, 7665$$, 7$)$, 7 $$,''G%'': 3*2$,, G
Agenda Krótkie wprowadzenie do Microsoft Azure Platform Wymagania midzynarodowe dla bezpieczestwa platformy Zarzdzanie tosamoci i dostpem Najsłabsze ogniwo Czy platforma Microsoft Azure jest biznesowo bezpieczna? Zasoby dodatkowe
Agenda Krótkie wprowadzenie do Microsoft Azure Platform Wymagania midzynarodowe dla bezpieczestwa platformy Zarzdzanie tosamoci i dostpem Najsłabsze ogniwo Czy platforma Microsoft Azure jest biznesowo bezpieczna? Zasoby dodatkowe
DZIE DZISIEJSZY: Windows Azure Krótkie wprowadzenie do Microsoft Azure Platform Compute: Virtualized compute environment based on Windows Server Storage: Durable, scalable, & available storage Management: Automated, model-driven driven management of the service SQL Azure (cloud-based database) Database: Relational processing for structured/unstructured data App Fabric (.NET services) Service Bus: General purpose application bus Access Control: Rules-driven, claims-based access control PRZYSZŁO: Live Services SharePoint Services Dynamics CRM,2(;*?(;@*4<(; $?<6*K 7L32,, J
Agenda Krótkie wprowadzenie do Microsoft Azure Platform Wymagania midzynarodowe dla bezpieczestwa platformy Zarzdzanie tosamoci i dostpem Najsłabsze ogniwo Czy platforma Microsoft Azure jest biznesowo bezpieczna? Zasoby dodatkowe
Wymagania midzynarodowe dla bezpieczestwa platformy N 05 A$3 3C 7,0O,! O 052B;1!,05 ($ %(<:''9''P $$:'*,9(( /.!-,,!O ($$ $ Q, 4(, 2,05 22A## 3## C K#,,5($,2 6A6C,,3A86;C,, 22,,2R 4523,5 =;$2 $532! $55 M
Agenda Krótkie wprowadzenie do Microsoft Azure Platform Wymagania midzynarodowe dla bezpieczestwa platformy Zarzdzanie tosamoci i dostpem Najsłabsze ogniwo Czy platforma Microsoft Azure jest biznesowo bezpieczna? Zasoby dodatkowe
Zarzdzanie tosamoci i dostpem (K! "# # #! $% ""&! %" %" 3K$3B' '(%)*%#'( '(" '(%)* '(% %%%#! +!,- '&.!'(%)* '. &!,,K $3 '& ' '/'/ "!" &0%0% '/ 1! '(%)* ' # 0%'/!"!'&! '/#&&! & '/ '/2'0'&32'0'3! "0%"'3!. -! 2' 0'3 2)*! & '/ 0%! %'45 '(%)* 0%2'0'3 9'
Zarzdzanie tosamoci i dostpem (roles) Web Role Worker Role Windows Server 2008 x64 IIS 7 ASP.NET 3.5 SP1 FastCGI PHP Native Code Full Trust User Mode Windows Server 2008 x64.net Start Native Code User Mode Inbound any TCP Port,2(;*?(;@*4<(; $?<6*K 7L32,, 99
Zarzdzanie tosamoci i dostpem (service bus),2(;*?(;@*4<(; $?<6*K 7L32,, 9
Zarzdzanie tosamoci i dostpem (access control),2(;*?(;@*4<(; $?<6*K 7L32,, 9G
Agenda Krótkie wprowadzenie do Microsoft Azure Platform Wymagania midzynarodowe dla bezpieczestwa platformy Zarzdzanie tosamoci i dostpem Najsłabsze ogniwo Czy platforma Microsoft Azure jest biznesowo bezpieczna? Zasoby dodatkowe
Shared Environment ) Hardware Boundary Hardware Boundary ) ) Hardware Boundary Hardware Boundary 9P
Sample of SQL Compatibility In Scope for v1 (=5 5= 6, 3 $, $5 * *55 * #!# 3 *D$E6552 %, %%, %%,5 B?D 8 Out of Scope for v1 655A6C, 5 R K5,5 @, $,= $E6$35, $E6$3$3) $ *K5 Physical server or catalog DDL and views 9J
Sample of SQL NON-Compatibility SQL Server 2005 655A6C6?D *, 75 $3) * 5 *,Q76Q76=5,,B*2 Q76,,, $E6B SQL Server 2008 25, (', # #641#6 4 K(6<$*<7 (5KD*=$2 65?D555A?C 65?D*,A?*C AC 3"74 @3 $, $,2@< @4F@< 7<*F, %85%0 ( 9:
Connection Model 25,,$E6#253 B;<*K3$E6$3A$BB$RC2B;<*K GBP$39B $E6$3''M;3 )3B $E6$3''M3439B9B $E6,, A*$C,3:BGB<3 *$,,,B 5$E6 5 6<),,B Support for ASP.NET controls Clients connect directly to a database Cannot hop across DBs (no USE) 9M
Security Model Uses regular SQL security model Authenticate logins, map to users and roles Authorize users and roles to SQL objects Support for standard SQL Auth logins Username + password Future AD Federation, WLID Windows Live ID, etc as alternate authentication protocols Security model is 100% compatible with on-premise SQL?@TTT 9!!!!: 9S
Agenda Krótkie wprowadzenie do Microsoft Azure Platform Wymagania midzynarodowe dla bezpieczestwa platformy Zarzdzanie tosamoci i dostpem Najsłabsze ogniwo Czy platforma Microsoft Azure jest biznesowo bezpieczna? Zasoby dodatkowe
Scenarios for V1 Departmental Applications Simple application built by individual or department Need simple deployment, self-management, IT: Empowerment and Governance Web Applications Small business or startup that uses the cloud as their IT Simple deployment, self-management, scale on demand ISV ISV hosting software on behalf of customer Multi-tenant support for billing and isolation Data Hub (Shortly After V1) Sharing and aggregating of data across tiers and across enterprises Centralized place for data, high scale, sync with existing data sources 9
Czy platforma Microsoft Azure jest biznesowo bezpieczna?,2(;*?(;@*4<(; $?<6*K 7L32,,
Agenda Krótkie wprowadzenie do Microsoft Azure Platform Wymagania midzynarodowe dla bezpieczestwa platformy Bezpieczestwo Windows Azure Bezpieczestwo AppFabric Bezpieczestwo SQL Azure Czy platforma Microsoft Azure jest biznesowo bezpieczna? Zasoby dodatkowe
Zasoby dodatkowe Windows Azure Platform http://www.azure.com/ MSDN Development Center http://msdn.microsoft.com/en-us/sqlserver/dataservices Team Blog http://blogs.msdn.com/sqlazure Windows Azure Platform Training Kit http://www.microsoft.com/downloads/details.aspx?familyid=413e88f8-5966-4a83-b309-53b7b77edf78&displaylang=en Microsoft OS Cloud Windows Azure Data Center Google & Amazon battle http://www.youtube.com/watch?v=k3b5ca6lzqe Microsoft patterns & practices: Windows Azure Security Guidance http://azuresecurity.codeplex.com/ Installing Certificates in Windows Azure VMs http://blogs.msdn.com/b/jnak/archive/2010/01/29/installing-certificates-in-windows-azure-vms.aspx &
Zasoby dodatkowe 7*2,5# 2,%%BB% 7 3;45252 2,%%BB%,3 *2($ :''9''P2@ K$35, 7 2,%%B D5 B%%DDD3%D%DD $2D%U,5V9W V($XPGGS9GW2V,QRQ 7@ K$3#2,5 2,%%B5 3B *27$3,6A$6C 2,%%BB%D%%&&M9::B,= 7$3,6A$6CI 3GB#,5 2,%%BB%D% %G'::&MB,= 7$, 2,%%BB%% *27$6*275* 2,%%BB%D%%'J:G9B,= 7 $3 2,%%BB% P
(&;<;&;! &; ; <<< 3=' '32%%> 162'6-4' 5-6?@4%A-6? >'770-6? @%6=3-< && 01'/722615 6( -6 752A - 302'+$- -11 111 # 935: $5% - -11 935: '+ $- -11 9: %02=- % B&C - -11" @/A- -11 $%3- -11 @%%- -11 3'%85%- -11. A /'- -11 3%85%,A - -11