Attacking and Defending the Microsoft Cloud (Office 365 & Azure AD)
Sean Metcalf (Trimarc) & Mark Morowczynski (Principal Program Manager, Microsoft)<\/p>\n\n\n\n
The allure of the “Cloud” is indisputable. Organizations are moving into the cloud at a rapid pace. Even companies that have said no to the Cloud in the past have started migrating services and resources. The Cloud is a new paradigm and the rapid update pace makes it difficult to keep up, especially when it comes to security. <\/p>\n\n\n\n
This presentation focuses on the Microsoft Cloud (Office 365 & Azure AD) and explores the most common attacks against the Cloud and describes effective defenses and mitigation. While the content is focused on the Microsoft Cloud, some of the attack and defense topics are applicable to other cloud providers and are noted where applicable. <\/p>\n\n\n\n
Key items covered:
\nAttacks against the Cloud
\nAccount compromise and token theft
\nMethods to detect attack activity
\nCloud identity firewall
\nSecuring cloud infrastructure against attacks
\nSecure cloud administration<\/p>\n\n\n\n