Top100summit安全既服务案例分析-–-Windows-Azure-AD-身份云的架构和设计——微软李雨航.pptx

安全既服务案例分析 – Windows Azure AD 身份云的架构和设计李雨航 Yale Li微软全球首席安全架构师云安全联盟全球总战略顾问 摘要1）传统IT安全软件的问题和不足?2）安全既服务的产生和要解决的问题3）Windows Azure AD 身份云的架构和设计4）开发人员使用场景5）打造身份云吸取的经验教训 传统IT安全软件的问题和不足不适应多租户的云服务用户扩展性的局限无法跟上快速开发部署的步伐Security Software Examples:Ad-Aware Free Antivirus + Protect your personal computer against virus and spyware attacks.Comodo Internet Security Protect PC from viruses, Trojans, worms, buffer overflows, zero-day attacks, spyware and hackers.Comodo Firewall Guard your Windows PC from malware and Internet based attacks.SuperAntiSpyware Free Edition Detect and remove spyware, malware, rootkits, trojans, hijackers, and other malicious threats.Comodo Antivirus Detect and destroy malware and viruses.USB Disk Security Provide protection against any malicious programs trying to attack via USB drive.HitmanPro 3 (32-bit) Rescue your computer from viruses and malware.Trend Micro HijackThis Scan your Registry and hard drive for spyware.Microsoft Security Essentials (64-bit) Protect your computer with Microsofts latest security software.Super Ad Blocker Block all forms of advertising, including pop-ups, Flash ads, and banner ads. 安全既服务的产生和要解决的问题云计算的安全问题安全既服务带来的机会云安全联盟的十大SECaaS身份云要解决的问题描述 云计算的安全问题Data Breaches Data Loss Account Hijacking Insecure APIs Denial of Service Malicious Insiders Abuse of Cloud Services Insufficient Due Diligence Shared Technology Issues 安全既服务带来的机会盾牌式战略思维：把注意力放在使用旧安全工具来保护云中数据和系统利剑式战略思维：为什么不能用云的力量创造出新一代安全工具这就是安全既服务（Security as a Service or SECaaS)：Provisioning elastic, scalable security solutions and services to both cloud based and traditional on premises systems in pure cloud or hybrid models. 云安全联盟的十大SECaaS分类Identity and Access Management (IAM) – 身份云Data Loss Prevention (DLP)Web SecurityEmail SecuritySecurity AssessmentsIntrusion Management, Detection, and Prevention (IDS/IDP)Security Information and Event Management (SIEM)EncryptionBusiness Continuity and Disaster Recovery (BCDR)Network Security 身份云要解决的问题云用户账号身份生命周期的管理支持所以云应用的登录统一技术标准的线上线下身份认证手段