Here, a selected few of NIST documents which I’ve found very informative may help those who seek formal criteria, guidelines and recommendations for evaluating containerization and security. NIST SP 800-190 Application Container Security Guide Published in September of 2017, this document (800-190) reminds us the potential security concerns and how to address those concerns when… Continue reading NIST Guidance on Container Security
This article details the process to install the latest Docker EE Version 17.06.2-ee-3 to a Microsoft Nano Server. I am sure there are different ways to do this. After a few iterations, here is one verified approach. A sample script is available. Background As shown below, when adding the server feature, containers, in Windows Server… Continue reading Microsoft Nano Server with Docker Enterprise Edition (EE)
Windows 10 Enterprise has introduced a set of new security features including Credential Guard which is a key for securing derived credentials and defend ‘credential theft and reuse’ attacks like Pass-the-Hash (PtH) and Pass-the-Ticket. This article is to provide a technical background and highlights how Credential Guard works. A good reference titled “Protect derived domain… Continue reading An Introduction of Windows 10 Credential Guard
This is something I had wanted to do for a while. Finally did welcome Charles Joy, a Principal Program Manager on the Azure Stack team, back to the show and we discussed the recent release of Microsoft Azure Stack Technical Preview 1. It’s a fun episode. Enjoy it.
This wave of TechNet events focuses on Azure (IaaS) V2, namely Azure Resource Manager or ARM. It is part of IT Innovation series currently delivered in US metros and many other geo-locations in the spring of 2016. For those outside of the US, go to http://aka.ms/ITInnovation to find out events near you. Come and have… Continue reading US TechNet on Tour | Cloud Infrastructure – Resource Page
It is a great pleasure to have an opportunity to meet the wonderful and vibrant student community and speak about cloud computing at UTA on October 8, 2015. I focused on making the point of why cloud and why now, demonstrated with the ability to constructing computing fabric and deploying application on demand. http://www.microsoft.com/feeds/omni_external_blogs.js Additional… Continue reading My Presentation at The Univ. of Texas at Arlington