This six-part series describes the threats, how you can respond, what processes you can put into place for the lifecycle of your application, and prescribes a way for you to implement best practices around the requirements of your application. I’ll also show ways for you to incorporate user identity and some of services Azure provides that will enable your users to access your cloud applications in new says.

At first, the steps may seem lengthy. But as you will find, Windows Azure shares the responsibility to help secure your application. By using Windows Azure platform, you are able to take a deeper look into your application and take steps to make your application more secure.

Here are the links to each part in this series:

Part 1: The Challenges, Defense in Depth. This post describes the threat landscape and introduces the plan for your application to employ defense in depth in partnership with Windows Azure.

Part 2: What Azure Provides Out-of-the-Box.This is an overview that security with Windows Azure is a shared responsibility, and Windows Azure provides your application with important security features. But then again, it also exposes other vulnerabilities that you should consider. In addition, I’ll explore how Microsoft approaches compliance.

Part 3: Identifying Your Security Frame. This post explores how you can examine your application and identify attack surfaces. The idea of a Security Frame is a way for you to look at your application to determine treats and your responses, before you even begin coding. He point you to checklists that you can use when you are architecting your application.

Part 4: What Else You Need to Do. In addition to protecting your application from threats, there are additional steps you should take when you deploy your application. We provide a list of mitigations that you should employ in your application development and deployment.

Part 5: Claims-Based Identity, Single Sign On. User identification represents the keys to accessing data and business processes in your application. In this section, I describe how you can separate user identity and the roles of your user out of your application and make it easier to create single sign on applications.

Part 6: How Azure Services Extends Your App Security. Finally, he shows how other services in Windows Azure provide secure identity mapping, messaging, and connection to on premises application. This section suggests how you can use Windows Azure Active Directory, Windows Azure Connect, and Service Bus for your cloud applications, on premises applications, and hybrid applications.

Part 7: Tips, Tools, Coding Best Practices. here are a few more items you should consider in securing your Windows Azure application. Here are some tools, coding tips, and best practices: running on the operating system, error handling, and how to access to Azure Storage

The intent of this series is to provide a context for you to learn more and empower you to write great applications for the public cloud.

Learn more at Global Foundation Services Online Security. The Global Foundation Services team delivers trustworthy, available online services that create a competitive advantage for you and for Microsoft’s Windows Azure.

Similar Posts:

• Windows Azure Training Kit Updated for Visual Studio 2010
• Windows Azure Toolkit for Windows Phone 7
• AppFabric, Identity, Dallas Announced at PDC 09
• Data Security On Windows Azure
• The Windows Azure Platform Training Kit December Update Available for Download

Microsoft patterns & practices is excited to announce the release of:

• A case study for Building Advanced Windows Phone Applications
• Building Testable Windows Phone Applications
• Developing a Windows Phone Application using the MVVM Pattern

Resources:

>> Go to Patterns & Practices: Windows Phone Guidance Home on MSDN
>> On Codeplex: http://wp7guide.codeplex.com

Similar Posts:

• WPF Composite Client
• Windows Azure Toolkit for Windows Phone 7
• Windows Phone Mango Silverlight developer toolkit released
• My article at Patterns and Practices – VSTS Wiki
• Data Security On Windows Azure

You can find an overview of the support was announced on Port 25 on Openness Update for Windows Azure.

We understand that there are many different technologies that developers may want to use to build applications in the cloud. Developers want to use the tools that best fit their experience, skills, and application requirements, and our goal is to enable that choice.

In keeping with that goal, we are extremely happy to be delivering new and improved experiences for Node.js, MongoDB, Hadoop, Solr and Memcached on Windows Azure.

Here are the highlights of the announcements:

• We are releasing the Windows Azure SDK for Node.js as open source, available immediately on Github. These libraries are the perfect complement to our recently announced contributions to Node.js and provide a better Node.js experience on Windows Azure. Head to the Windows Azure Developer Center for documentation, tutorial, samples and how-to guides to get you started with Node.js on Windows Azure.
• We will also be delivering the Node package manager for Windows (npm) code to allow use of npm on Windows for simpler and faster Node.js configuration and development. Windows developers can now use NPM to install Node modules and take advantage of its automated handling of module dependencies and other details.
• To build on our recent announcement about Apache Hadoop, we are making available a limited preview of the Apache Hadoop based distribution service on Windows Azure.  This enables Hadoop apps to be deployed in hours instead of days, and includes Hadoop Javascript libraries and powerful insights on data through the ODBC driver and Excel plugin for Hive. Read more about this on the Windows Azure team blog. If you are interested in trying this preview, please complete the form herewith details of your Big Data scenario.  Microsoft will issue an access code to select customers based on usage scenarios.
• For all of you NoSQL fans, we have been working closely with 10Gen and theMongoDB community in the past few months, and if you were at at MongoSV last week you have already seen MongoDB running on Windows Azure. Head out to the10Gen website to find downloads, documentation and other document-oriented goodies. If you’re using the popular combination of Node.js and MongoDB, a simple straightforward install process will get you started on Windows Azure. Learn morehere.
• For Java developers, take a look at the updated Java support, including a new and revamped Eclipse plugin. The new features are too many to list for this post, but you can count on a much better experience thanks to new and exciting functionality such as support for sticky sessions and configuration of remote Java debugging. Head over to the Windows Azure Developer Center to learn more.
• Does your application need advanced search capabilities? If so, the chances are you either use or are evaluating Solr, and so the good news for you is that we just released a set of code tools and configuration guidelines to get the most out of Solr running on Windows Azure.

Similar Posts:

• Windows Azure 12/12/11 Announcement
• Improved Developer Experience, Interoperability, and Scalability on Windows Azure
• Windows Azure Toolkit for Windows Phone 7
• Introducing Windows Azure AppFabric Applications
• Enterprise Library Integration Pack for Windows Azure

Additionally, today, senior Microsoft leaders will participate in a broadcast event: Learn Windows Azure to demonstrate how easy it is for developers to get started with Windows Azure and show how to build scalable cloud applications using Visual Studio.  The event includes a number of great hands-on demos as well.

In this release, we really focused on ease of use and creating more value for .NET developers as well as opening up new opportunities for open source developer to take advantage of Windows Azure.  Among the highlights:

• New and Enhanced Open Source Software Experience-Windows Azure SDK for Node.JS makes Windows Azure a first-class environment for Node.JS developers that support hosting, storage, and service bus.
• A new Hadoop Service Preview for Windows Azure brings Hadoop Big Data capabilities to Windows Azure and enables Hadoop apps to be deployed in hours instead of days.  To gain greater insights on data (structured, semi-structured and unstructured data), Hadoop on Windows Azure will enable customers to analyze data through familiar tools such as Excel and Microsoft BI tools such as Power View and PowerPivot.
• Increased SQL Azure maximum database sizes in SQL Azure (at no additional cost) and a new sharding pattern to simplifies elastic scale-out.
• Price reductions per gigabyte SQL Azure databases storage

You can find more details on the announcement here.

WHY DOES THIS RELEASE MATTER TO YOU? 

About one year ago, I was working with an ISV who wanted to migrate their commercial application to Windows Azure but was concerned that SQL Server database schema they relied on was not available in SQL Azure at the time.  With new SQL Azure sharding patterns, this partner’s concerns are being satisfied.  I’ll look forward to following with that partner and talking and showing off our new capabilities.

Similar Posts:

• Openness Update for Windows Azure
• Improved Developer Experience, Interoperability, and Scalability on Windows Azure
• Windows Azure Training Kit Updated for Visual Studio 2010
• Creating and Executing First Cloud Project With Windows Azure
• Windows Azure Tools, Developer Training Kits Updated

For years the Enterprise Library application blocks have helped developers address the typical cross-cutting concerns of enterprise development (such as diagnostic logging, data validation, and exception handing). With over 3.5 million downloads, they take a prominent place in the toolbox of a modern .NET developer. The good news is that most of the Enterprise Library 5.0 application blocks simply work on Windows Azure. However, developing for the Windows Azure platform presents new challenges, including how to make applications more elastic (via autoscaling), and more stable and resilient to transient failures. The Enterprise Library Integration Pack for Windows Azure focuses on addressing these challenges. It provides reusable components and developer’s guidance designed to encapsulate recommended practices which facilitate consistency, ease of use, integration, extensibility, scalability and cost-effectiveness. Developers and IT professionals familiar with other Enterprise Library application blocks as well as those who are new to Enterprise Library will be able to benefit from the comprehensive set of content we are shipping today. You can pick and choose what matters to you and to your app, and adopt only those particular blocks/features.

Highlights

This release includes a comprehensive set of technical content, including:

• Two new application blocks:
  • Autoscaling Application Block ("Wasabi") to help you to automatically scale both web and worker roles in Windows Azure by dynamically provisioning/decommissioning roles or throttling. These scaling actions are based on timetables or on metrics collected from the application and/or Windows Azure Diagnostics.
  • Transient Fault Handling Application Block ("Topaz") to help you make your Windows Azure application more resilient to transient errors when you are using these cloud services: SQL Azure, Windows Azure Storage, Windows Azure Caching, and Windows Azure Service Bus.
• One new configuration source:
  • Blob configuration source to load configuration information from a blob in your Azure Storage account so that you can modify it without having to redeploy your application to Windows Azure.
• Windows PowerShell cmdlets to browse and manipulate the Autoscaling Application Block settings directly from Windows PowerShell.
• Protected configuration provider to allow you to encrypt sections of your configuration files in Windows Azure.
• Updated database creation scripts so that you can migrate your code using the database trace listeners of the Logging Application Block and the Caching Application Block.
• A substantial collection of experience guidance help you ramp up quickly, including:
  • Reference documentation
  • Developer’s guide
  • Tailspin Surveys sample application (reference implementation, installation guide)
  • On-premises sample application for hosting the Autoscaling Application Block and exploratory testing (included with source under (install location)/WindowsAzure/Autoscaling/Hosts/ConsoleAutoscaler)
  • Planning worksheet for Wasabi to help you understand the interactions between different timing values governing the overall autoscaling regime.

For detailed change log from Beta to Final and installation instructions, see Release Notes.

How to Get it?

The recommended way to obtain the Enterprise Library Integration Pack for Windows Azure is as NuGet packages. Alternatively, you can download self-extracting zip files with binaries, sources (including tests) and the reference implementation from MSDN. The configuration tool is available as a Visual Studio extension package (VSIX) from the Visual Studio Gallery.

Similar Posts:

• Enterprise Library 3.1 Released
• EntLib Contrib September 2007 Release
• Windows Azure Drive Beta Released
• Multi-Tenant Architecture @ Windows Azure Platform
• Windows Azure Toolkit for Windows Phone 7

From the post:

Key Highlights:

• New Developer Experience and Enhanced Interoperability—Access to Windows Azure libraries for .NET, Java, and Node.js is now available under Apache 2 open source license and hosted on GitHub, a new Windows Azure SDK for Node.js makes Windows Azure a first-class environment for Node applications, and a limited preview of an Apache Hadoop based service for Windows Azure enables Hadoop apps to be deployed in hours instead of days.
• Easier to Get Started and Simplified Subscription Management—Revamped Dev Centers for multiple languages with helpful content and tutorials, a new sign-up process with spending caps makes sign-up simple, fast and ensures a completely free 90 day trial. View real-time usage and billing details directly from the Windows Azure Management Portal and see expected costs with a simplified pricing calculator.
• Improved Database Scale—Three times the maximum database size for SQL Azure (at no additional cost—details below), and SQL Azure Federation, a new sharding pattern that simplifies elastic scale-out.
• Better Overall Value—New price cap for the largest SQL Azure databases reduces effective price per gigabyte by 67 percent, Data Transfer prices in North America and Europe have been reduced by 25 percent, and Service Bus usage is now free through March 2012.

Windows Azure is always evolving based on your feedback. We encourage you to take look at today’s updates and our pricing changes, attend tomorrow’s Learn Windows Azure event online, and let us know what you think by posting a comment on this post or talking to us on Twitter @WindowsAzure. These are just a few of the highlights. See below for additional details

Similar Posts:

• Windows Azure 12/12/11 Announcement
• Openness Update for Windows Azure
• SQL Azure Now Supports Database Copy
• Windows Azure Training Kit Updated for Visual Studio 2010
• Updated Windows Azure SDK & Windows Azure HPC Scheduler SDK Available

Silverlight 5 adds a ton of new features over what we had with Silverlight 4. Silverlight is part of a rich offering of technologies from Microsoft helping developers deliver applications for the web, desktop and mobile devices. Download Silverlight 5, a free plug-in less than 7 MB in size that can be installed in less than 10 seconds.

New features in Silverlight 5 include Hardware Decode of H.264 media, which provides a significant performance improvement with decoding of unprotected content using the GPU; Postscript Vector Printing to improve output quality and file size; and an improved graphics stack with 3D support that uses the XNA API on the Windows platform to gain low-level access to the GPU for drawing vertex shaders and low-level 3D primitives.

In addition, Silverlight 5 extends the ‘Trusted Application’ model to the browser for the first time. These features, when enabled via a group policy registry key and an application certificate, mean users won’t need to leave the browser to perform complex tasks such as multiple window support, full trust support in browser including COM and file system access, in browser HTML hosting within Silverlight, and P/Invoke support for existing native code to be run directly from Silverlight.

For more information, visit the Microsoft Silverlight site. For additional information on support policy, visit Microsoft Silverlight Support Lifecycle Policy.

Similar Posts:

• Silverlight 5 RC Available for Download
• Silverlight 3 Beta
• Silverlight 4, Office/Sharepoint 2010 Beta Announced at PDC 09
• Multi-Tenant Architecture @ Windows Azure Platform
• Virtual Team System User Group

The entire event is being streamed live by Channel 9. The event begins at 9 am Pacific (noon Eastern) on December 13.

Register for Learn Windows Azure Event.

The entire event will be streamed LIVE by Channel 9!

Similar Posts:

• Updated Windows Azure SDK & Windows Azure HPC Scheduler SDK Available
• The Windows Azure Platform Training Kit December Update Available for Download
• Windows Azure Toolkit for Windows Phone 7
• Windows Azure 12/12/11 Announcement
• Windows Azure Training Kit Updated for Visual Studio 2010

we are simplifying the development experience on Windows Azure with three updates—a new version of the Windows Azure SDK, a new Windows Azure HPC Scheduler SDK, and an updated Windows Azure Platform Training Kit.  Whether you are already using Windows Azure or looking for the right moment to get started, these updates make it easier than ever to build applications on Windows Azure.

Highlights:

• Windows Azure SDK (November 2011)—Multiple updates to the Windows Azure Tools for Visual Studio 2010 that simplify development, deployment, and management on Windows Azure. The full Windows Azure SDK can be downloaded via the Web Platform installer here.
• Windows Azure HPC Scheduler SDK— Works in conjunction with the Windows Azure SDK and includes modules and features to author high performance computing (HPC) applications that use large amounts of compute resources in parallel to complete work.  The SDK is available here for download.
• Windows Azure Platform Training Kit—Includes hands-on labs, demos, and presentations to help you learn how to build applications that use Windows Azure. Compatible with the new Windows Azure SDK and Windows Azure Tools for Visual Studio 2010. The training kit can be downloaded here.

You can start building your application on it in 3 simple and easy to do steps:

1. Download the Tools:

Get Visual Studio Express and the Windows Azure Tools for Visual Studio to start building and debugging applications for the Windows Azure Platform athttp://www.microsoft.com/windowsazure/sdk/
If you have already Visual Studio installed you can download the tools directly fromhttp://tinyurl.com/toolsforazure.

2. Setup an Account:

Set up an account and obtain a free subscription for accessing the online portals for Windows Azure, SQL Azure and Windows Azure AppFabric. You can learn more about the accounts athttp://www.microsoft.com/windowsazure/learn/get-started/ or you can sign up directly and get the trial http://tinyurl.com/getazurefreetrial.

3. Create your First application and Deploy it on the Windows Azure Platform:

First learn how to create a simple ASP.NET application in Visual Studio for Windows Azure and deploy it on Windows Azure at http://www.microsoft.com/windowsazure/learn/tutorials/getting-started-web-tutorial/

When all steps are executed successfully you should have running your first application on the Windows Azure Platform.

Similar Posts:

• Windows Azure Tools, Developer Training Kits Updated
• Windows Azure Training Kit Updated for Visual Studio 2010
• The Windows Azure Platform Training Kit December Update Available for Download
• Azure:Updated SDK and Tools for Visual Studio Available Now
• Creating and Executing First Cloud Project With Windows Azure

Similar Posts:

• Learn Windows Azure Event
• Virtual Team System User Group
• Microsoft WebMatrix
• Virtual Team System User Group
• Watch PDC10, Live from the Redmond Campus, October 28 and 29