Michael Howard is a 30-year Microsoft veteran and is currently a Principal Security Program Manager in the Azure Data Platform team, working on security engineering. He is one of the original architects of the Microsoft Security Development Lifecycle and has helped diverse customers such as government, military, education, finance, and healthcare secure their Azure workloads. He was the application security lead for the Rio 2016 Olympic games, which were hosted on Azure.Heinrich Gantenbein is a Senior Principal Consultant on Cybersecurity in Microsoft's Industry Solutions Delivery. With 30+ years of experience in software engineering and more than 30 years of experience in consulting, he brings a wealth of practical know-how to his role. Heinrich specializes in Azure security, threat modeling, and DevSecOps.Simone Curzi is a Principal Consultant from Microsoft's Industry Solutions Delivery. He has 20+ years of experience covering various technical roles in Microsoft and has fully devoted himself to security for more than 10 years. A renowned threat modeling and Microsoft Security Development Lifecycle expert, Simone is a regular speaker at international conferences such as Microsoft Ready, Microsoft Spark, (ISC)2 Security Congress, Carnegie Mellon's SEI DevOps Days, and Security Compass Equilibrium. Simone is also author of an open source threat modeling tool, Threats Manager Studio.

• PART I SECURITY PRINCIPLESCHAPTER 1 Secure development lifecycle processesCHAPTER 2 Secure designCHAPTER 3 Security patternsCHAPTER 4 Threat modelingCHAPTER 5 Identity, authentication, and authorizationCHAPTER 6 Monitoring and auditingCHAPTER 7 GovernanceCHAPTER 8 Compliance and risk programs  PART II SECURE IMPLEMENTATIONCHAPTER 9 Secure codingCHAPTER 10 Cryptography in AzureCHAPTER 11 Confidential computingCHAPTER 12 Container securityCHAPTER 13 Database securityCHAPTER 14 CI/CD securityCHAPTER 15 Network securityAppendix A: Core cryptographic techniques

Michael Howard is a 30-year Microsoft veteran and is currently a Principal Security Program Manager in the Azure Data Platform team, working on security engineering. He is one of the original architects of the Microsoft Security Development Lifecycle and has helped diverse customers such as government, military, education, finance, and healthcare secure their Azure workloads. He was the application security lead for the Rio 2016 Olympic games, which were hosted on Azure.Heinrich Gantenbein is a Senior Principal Consultant on Cybersecurity in Microsoft's Industry Solutions Delivery. With 30+ years of experience in software engineering and more than 30 years of experience in consulting, he brings a wealth of practical know-how to his role. Heinrich specializes in Azure security, threat modeling, and DevSecOps.Simone Curzi is a Principal Consultant from Microsoft's Industry Solutions Delivery. He has 20+ years of experience covering various technical roles in Microsoft and has fully devoted himself to security for more than 10 years. A renowned threat modeling and Microsoft Security Development Lifecycle expert, Simone is a regular speaker at international conferences such as Microsoft Ready, Microsoft Spark, (ISC)2 Security Congress, Carnegie Mellon's SEI DevOps Days, and Security Compass Equilibrium. Simone is also author of an open source threat modeling tool, Threats Manager Studio.

• PART I SECURITY PRINCIPLESCHAPTER 1 Secure development lifecycle processesCHAPTER 2 Secure designCHAPTER 3 Security patternsCHAPTER 4 Threat modelingCHAPTER 5 Identity, authentication, and authorizationCHAPTER 6 Monitoring and auditingCHAPTER 7 GovernanceCHAPTER 8 Compliance and risk programs  PART II SECURE IMPLEMENTATIONCHAPTER 9 Secure codingCHAPTER 10 Cryptography in AzureCHAPTER 11 Confidential computingCHAPTER 12 Container securityCHAPTER 13 Database securityCHAPTER 14 CI/CD securityCHAPTER 15 Network securityAppendix A: Core cryptographic techniques

Michael Howard is a 30-year Microsoft veteran and is currently a Principal Security Program Manager in the Azure Data Platform team, working on security engineering. He is one of the original architects of the Microsoft Security Development Lifecycle and has helped diverse customers such as government, military, education, finance, and healthcare secure their Azure workloads. He was the application security lead for the Rio 2016 Olympic games, which were hosted on Azure.Heinrich Gantenbein is a Senior Principal Consultant on Cybersecurity in Microsoft's Industry Solutions Delivery. With 30+ years of experience in software engineering and more than 30 years of experience in consulting, he brings a wealth of practical know-how to his role. Heinrich specializes in Azure security, threat modeling, and DevSecOps.Simone Curzi is a Principal Consultant from Microsoft's Industry Solutions Delivery. He has 20+ years of experience covering various technical roles in Microsoft and has fully devoted himself to security for more than 10 years. A renowned threat modeling and Microsoft Security Development Lifecycle expert, Simone is a regular speaker at international conferences such as Microsoft Ready, Microsoft Spark, (ISC)2 Security Congress, Carnegie Mellon's SEI DevOps Days, and Security Compass Equilibrium. Simone is also author of an open source threat modeling tool, Threats Manager Studio.

• PART I SECURITY PRINCIPLESCHAPTER 1 Secure development lifecycle processesCHAPTER 2 Secure designCHAPTER 3 Security patternsCHAPTER 4 Threat modelingCHAPTER 5 Identity, authentication, and authorizationCHAPTER 6 Monitoring and auditingCHAPTER 7 GovernanceCHAPTER 8 Compliance and risk programs  PART II SECURE IMPLEMENTATIONCHAPTER 9 Secure codingCHAPTER 10 Cryptography in AzureCHAPTER 11 Confidential computingCHAPTER 12 Container securityCHAPTER 13 Database securityCHAPTER 14 CI/CD securityCHAPTER 15 Network securityAppendix A: Core cryptographic techniques