Description
Book SynopsisMichael Howard is a 30-year Microsoft veteran and is currently a Principal Security Program Manager in the Azure Data Platform team, working on security engineering. He is one of the original architects of the Microsoft Security Development Lifecycle and has helped diverse customers such as government, military, education, finance, and healthcare secure their Azure workloads. He was the application security lead for the Rio 2016 Olympic games, which were hosted on Azure.
Heinrich Gantenbein is a Senior Principal Consultant on Cybersecurity in Microsoft's Industry Solutions Delivery. With 30+ years of experience in software engineering and more than 30 years of experience in consulting, he brings a wealth of practical know-how to his role. Heinrich specializes in Azure security, threat modeling, and DevSecOps.
Simone Curzi is a Principal Consultant from Microsoft's Industry Solutions Delivery. He has 20+ years of experi
Table of Contents
PART I SECURITY PRINCIPLES
CHAPTER 1 Secure development lifecycle processes
CHAPTER 2 Secure design
CHAPTER 3 Security patterns
CHAPTER 4 Threat modeling
CHAPTER 5 Identity, authentication, and authorization
CHAPTER 6 Monitoring and auditing
CHAPTER 7 Governance
CHAPTER 8 Compliance and risk programs
PART II SECURE IMPLEMENTATION
CHAPTER 9 Secure coding
CHAPTER 10 Cryptography in Azure
CHAPTER 11 Confidential computing
CHAPTER 12 Container security
CHAPTER 13 Database security
CHAPTER 14 CI/CD security
CHAPTER 15 Network security
Appendix A: Core cryptographic techniques
