La protezione del dato in architetture full PaaS Azure

 
Italiano Intermediate Security

Indubbiamente i servizi Platform-as-a-Service rappresentano un'opportunità estremamente interessante quando si vuole distribuire la propria soluzione su un ambiente gestito e ricco di funzionalità, agile e di facile adozione, che permette di spostare il focus sulla componente applicativa piuttosto che sullo stack infrastrutturale. Spesso mi trovo però a constatare falle di sicurezza in queste architetture, proprio perché la facilità di adozione e la maggiore attenzione dedicata agli aspetti funzionali della soluzione portano ad ignorare le best practices di adozione, lasciando i nostri dati alla mercé di potenziali attaccanti. Vediamo insieme quali funzionalità dei diversi servizi possiamo sfruttare per realizzare in maniera semplice una soluzione data-oriented ragionevolmente sicura, riducendo i rischi di attacchi dall'esterno e di data exfiltration.

Speaker

Marco Obinu

Azure MVP, Advisory Engineer @ Softjam S.p.A, Geek to the bone

Curious by nature, talkative geek who can speak in front of a public or a camera, in love with technology, especially Azure and SQL Server. I want to understand how things work and to solve problems by myself during work as in my many hobbies.

Code of Conduct

We seek to provide a respectful, friendly, professional experience for everyone, regardless of gender, sexual orientation, physical appearance, disability, age, race or religion. We do not tolerate any behavior that is harassing or degrading to any individual, in any form. The Code of Conduct will be enforced.

Who does this Code of Conduct apply to?

All live stream organizers using the Global Azure brand and Global Azure speakers are responsible for knowing and abiding by these standards. Each speaker who wishes to submit through our Call for Presentations needs to read and accept the Code of Conduct. We encourage every organizer and attendee to assist in creating a welcoming and safe environment. Live stream organizers are required to inform and enforce the Code of Conduct if they accept community content to their stream.

Where can I get help?

If you are being harassed, notice that someone else is being harassed, or have any other concerns, report it. Please report any concerns, suspicious or disruptive activity or behavior directly to any of the live stream organizers, or directly to the Global Azure admins at team@globalazure.net. All reports to the Global admin team will remain confidential.

Code of Conduct for local live streams

We expect local organizers to set up and enforce a Code of Conduct for all Global Azure live stream.

A good template can be found at https://confcodeofconduct.com/, including internationalized versions at https://github.com/confcodeofconduct/confcodeofconduct.com. An excellent version of a Code of Conduct, not a template, is built by the DDD Europe conference at https://dddeurope.com/2020/coc/.