Windows 10: Microsoft Information Protection SDK at RSA Conference 2019

Brink · Mar 5, 2019

Last year we publicly announced the Microsoft Information Protection solutions (MIP) SDK at the 2018 RSA Conference. Over the past 11 months, both Microsoft and our partners have been busy building integrations and expanding the reach of Microsoft Information Protection both within our own solutions and across our ecosystem of partners.

Microsoft Intelligent Security Association (MISA) and Microsoft Information Protection

We have simplified the engagement model for partners who want to integrate their solutions with Microsoft Information Protection. Now partners can join the Microsoft Intelligent Security Alliance (MISA), which enables them to integrate with the MIP SDK as well as integrate with other Microsoft security solutions. Learn more details on how to get started.

Microsoft Information Protection SDK Releases

The MIP SDK became generally available at the Microsoft Ignite conference in late 2018. Since then, we have released another update in January 2019 - and the next update will be in the next few months. Please review the following resources to find out more details on what is available in the MIP SDK releases.
• Details on the MIP SDK 1.0 capabilities
• Details on the MIP SDK 1.1 capabilities
With the 1.1 SDK, we now have complete coverage of Microsoft Information Protection for labeling and protection on all major operating systems - Windows, macOS, Linux (Debian, Redhat, CentOS, Ubuntu), iOS, and Android. If you have not yet developed an integration, we recommend that you start with the MIP SDK 1.1. If you already have an integration using the MIP SDK 1.0, please plan your update to version 1.1 since there a few capabilities within it that might be of interest such as support for on-premises rights management. For more details on the capabilities are captured at this link

Partner Integrations with the MIP SDK

While the MIP SDK was released just over 5 months ago, there are already several partners that have released their integration as generally available or are in the process of releasing their integration.

Partners who have integrated with Microsoft Information Protection solutions

Adobe (Generally Available)

PDFs now support native integration with information protection. The relationship between Microsoft and Adobe has made the PDF experience within the MIP ecosystem a more high-fidelity experience for users. Our first set of use cases help in the consumption scenarios of protected PDFs with MIP. Adobe Acrobat Reader on Windows can now consume labeled and protected PDF documents. Unlike past integrations where the PDF documents extension changed upon protecting, with the new integration when a PDF document is labeled and protected the extension remains as a .pdf. The Adobe Acrobat Reader solution recognizes the PDF is protected and proceed to prompt the user to open the PDF documents provided the user has the right set of rights to open the document.

Adobe Integration with Microsoft Information Protection Solutions

Forcepoint (Generally Available)

For many years, customers have trusted Forcepoint’s DLP to satisfy compliance regulations and protect their intellectual property. With the enforcement of the GDPR regulation, the focus on classifying and protecting data, wherever it resides, has become of utmost importance. Forcepoint and Microsoft are partnering to extend protection offered by Microsoft Information Protection solutions to customers’ on-premises digital estate.

Forcepoint’s ecosystem of data classification partnerships allows for joint customers to experience the best that both solutions have to offer. When data resides in Microsoft’s cloud services, customers can take advantage of the classification system that Microsoft provides. Forcepoint ensures that Microsoft Information Protection classification, labeling and data protection can be automatically applied to sensitive data on managed endpoints, within the customer’s datacenter infrastructure or within sanctioned cloud applications.

Forcepoint products also work to provide the appropriate visibility, access and data protection in public or hybrid cloud environments. Customers looking to protect data in Office 365 and other SaaS apps can do so thanks to this interoperability. Organizations can proactively apply policies governing the use of cloud-hosted files to help ensure compliance and deliver uniform visibility and control over cloud-hosted information assets, based on classification applied by Microsoft Information Protection solutions. For more details please visit http://www.forcepoint.com

Forcepoint DLP Administration console with MIP Labels

Palo Alto (Generally Available)

Palo Alto Networks Next Generation Firewalls can now detect documents that are using Azure Information Protection labels, allowing you to enforce policies at the network level that can prevent sensitive information from being sent outside of your organization. Administrators can craft policies to alert on sensitive documents traversing the firewall, prevent highly confidential documents from leaving the network, and track the flow of these documents to sanctioned SaaS applications, such as a corporate file repository or data room. This will work for both protected and unprotected file types. To find out more, please refer to their documentation.

Palo Alto Firewall software integration with MIP labels

Trustwave (Generally Available)

Trustwave’s Secure Email Gateway Product can now reason over protected emails and determine if the protected content being sent complies with company policy. In addition, email remains the largest attack surface with malicious web links data leakage from attachments due to breakdowns in protection control. Trustwave’s solution provides protection against an evolving threat landscape. For more details please go to the following location

An MIP email reasoned upon by Trustwave's Secure Email Gateway

Informatica Secure@Source (under development)

Microsoft and Informatica are offering a unified approach to data protection, privacy and regulatory risk mitigation across devices, the modern workplace, Azure Data Services and on-premises and other data repositories. By synchronizing policy and sensitive data definitions between Microsoft Information Protection solutions and Informatica’s Secure@Source intelligent data privacy and protection platform, the office of the CISO can have a “single pane-of-glass” view into the proliferation of sensitive data throughout the enterprise and aggregate risk profiles for key regulations such as GDPR compliance.

In addition, Microsoft Information Protection solutions and Secure@Source provide data protection components that can encrypt and mask sensitive data inside and outside of the enterprise - not only detecting sensitive data but also protecting it. “Today, sensitive data can be found in the cloud, on-premises, on the desktop, within SaaS applications and 3rd-party data services - a bigger range of data repositories than ever before.“ said Jitesh Ghai, SVP and GM Data Quality, Security and Data Governance at Informatica. “When you compound this data proliferation with today’s regulatory compliance requirements, being able to offer a unified, comprehensive solution with Microsoft to reduce risk and protect data for today’s enterprises is truly ground breaking.” Please visit Enterprise Cloud Data Management | Informatica US

Informatica Secure@Source integration with MIP labels

Digital Guardian (under development)

Using the Microsoft Information Protection (MIP) SDK, Microsoft and Digital Guardian customers can extend their data protection policy to automatically label and protect files. By combining Microsoft Information Protection solutions with Digital Guardian's rich visibility into file classification and controls, companies are better able to safeguard sensitive files from egress, whether it be through outbound email messages, cloud uploads and downloads, or files being copied to external storage. The integration will also assist organizations when it comes to securely collaborating with external parties. For more details on this integration visit Enterprise IP DLP Software | Digital Guardian

Digital Guardian Endpoint DLP integration with Microsoft Information Protection SDK

As you can we are excited about the potential we have unlocked for our partners with the new MIP SDK. Please try out our new SDK by downloading it from http://aka.ms/mipsdkbinaries . We are looking forward to your feedback.
Click to expand...

Source: Microsoft Information Protection SDK @RSA Conference 2019 - Microsoft Tech Community - 360125

:)

Brink · Mar 5, 2019

Microsoft at RSA conference USA 2015, April 20-24

Security and compliance are among the top questions customers have for every cloud service provider. We look forward to sharing Microsoft’s perspective—including progress on Office 365 security and compliance—at the upcoming RSA Conference, April 20-24, at the Moscone Center, San Francisco.

“The world’s leading information security conference and exposition” will feature Scott Charney, corporate vice president, who will deliver an opening keynote on Microsoft’s approach to security and trust April 21st at 9:15 a.m. PT. Later on Tuesday, Bret Arsenault, Microsoft’s chief information security officer, will lead a panel discussion on Security and Privacy in the Cloud: How Far Have We Come? For a complete list of Microsoft track sessions and times, please visit the Microsoft @ RSA 2015 website.

Microsoft at RSA 2015 expo

Come visit our booth No. 3505 in the North Expo Hall and see Microsoft’s comprehensive and highly secure Enterprise Cloud including clients and devices with Office 365, Microsoft Azure, Microsoft Dynamics CRM, Microsoft InTune and Microsoft Windows.

yxvzAcdXEjY

We’ll also host 15 “From Inside the Cloud” interactive sessions in our booth theater. Be part of our live studio audience for these 15-minute daily shows, based on our “https://www.youtube.com/channel/UCShsycEwBynDUqAD4kYYCrQ.” We’ll kick off at 5:30 p.m. PT, Monday, April 20th. Attend to win prizes at every session!

Microsoft industry appreciation party

Step into our cloud from 8 p.m. to midnight PT, Wednesday, April 22nd, at The Village, 969 Market St. You’ll experience the best in local music, food and talent. It’s a secure event so visit the Microsoft booth, No. 3505, in the North Expo Hall for your free ticket. The Village is just a stone’s throw away from the Moscone Center, so no excuses!

If you haven’t already registered for RSA USA 2015, please do so today and we’ll see you there! To learn all about our overall presence at RSA, please visit the Microsoft @ RSA 2015 website.
Click to expand...

Source: Microsoft at RSA conference USA 2015, April 20-24 - Office Blogs

Brink · Mar 5, 2019

Microsoft Information Protection MIP SDK Private Preview Update

Summary

Updating to this new build is required! Grab the latest here: https://aka.ms/mipsdkbins

We've made some changes to the policy file that will break downlevel versions of the SDK. The new version is backward compatible. You'll want to update your SDK builds ASAP to prevent any issues!

Service components related to labeling are still being flighted only to non-production tenants. If you have a dev/test tenant that you'd like to enable for the labeling components, please fill out the form here: Fill | MIP SDK Tenant Flighting Request

Change List

Split Binaries/Libraries/Headers by API

Microsoft Information Protection Sync Service Preview

Third-Party app registration now supported!

Various performance, and stability updates

Operating System Support

In this version we're including functional support for the following platforms:

Debian 9

MacOS

RedHat Linux 7

Ubuntu 16.04

Windows Server and client (all supported versions)

iOS (UPE only)

Split Binaries/Libraries

Previous releases of the MIP SDK were monolithic - all three APIs were bundled into a single package and it was somewhat difficult to split them up. The good news is that we've now split them up for you, by API. This will help to reduce the size of applications which are using only the Policy or Protection APIs. The latest release is a zip that contains several other ZIPs and tarballs for the various supported platforms.

mip_sdk_API_PLATFORM_Version.[zip|.tar.gz]

File API on Ubuntu 16.04, for example, is: mip_sdk_file_ubuntu1604.0.4.456.0.tar.gz
Inside each archive, you'll find bins, headers, and samples.

MIP Sync Service

A new service component has been added that will allow third-party clients to authenticate and download policy. This new service is called the Microsoft Information Protection Sync Service.

The service itself requires no configuration or setup; it simply handles making all of the labels, protection settings, content marking, and other MIP-related policy settings available to SDK clients. The only area where this endpoint is exposed is in Azure Active Directory under the App Registration -> Required Permissions section. The SDK changes to utilize this endpoint, excluding app registration, are completely transparent and require only that you use the latest build.

Third-Party App Registration

Previously, a hard-coded client ID was required to test and develop with the SDK. We've completed the work to enable you to register your own Azure AD Applications and to provide those client IDs to the MIP SDK APIs.

To register your application, follow these instructions from the Azure AD docs: https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-v1-integrate-apps-with-az...

Once the application has been registered, you'll then need to add permissions to the application. Update the application by following the steps detailed here, but using the API names listed in the table below.

Up to two APIs are required for the SDK, depending on which MIP SDK API you're using:

[table][tr]MIP SDK API Azure AD App Registration API [/tr] [tr][td]File[/td] [td]Microsoft Information Protection Sync Service Microsoft Rights Management Service[/td] [/tr] [tr][td]Policy[/td] [td]Microsoft Information Protection Sync Service[/td] [/tr] [tr][td]Protection[/td] [td]Microsoft Information Protection Sync Service (for pulling labels/template IDs) Microsoft Rights Mangement Service[/td] [/tr] [/table]

Native applications don't require any special work. Provide the client ID and resource, get a token for the services.

Web app / API applications are required to use certificate-based authentication. We will have samples on that available soon. For now, the best CBA sample can be found over at Azure Code Samples.

Support

The MIP SDK is still in public preview and is subject to preview support terms. The SDK is intended for non-production development and testing use only! We will announce general availability soon and at that time the SDK will be fully supported.
Click to expand...

Source: MIP SDK Public Preview September Update

NICK ADSL UK · Mar 5, 2019

Microsoft February 2019 Security Updates

Release Notes
February 2019 Security Updates
Release Date: February 12, 2019

The February security release consists of security updates for the following software:

Adobe Flash Player
Internet Explorer
Microsoft Edge
Microsoft Windows
Microsoft Office and Microsoft Office Services and Web Apps
ChakraCore
.NET Framework
Microsoft Exchange Server
Microsoft Visual Studio
Azure IoT SDK
Microsoft Dynamics
Team Foundation Server
Visual Studio Code
Please note the following information regarding the security updates:

A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates.

ADV190003
ADV190007 *
ADV990001
CVE-2019-0540 *
CVE-2019-0600
CVE-2019-0601
CVE-2019-0602
CVE-2019-0615
CVE-2019-0616
CVE-2019-0619
CVE-2019-0621
CVE-2019-0628
CVE-2019-0635
CVE-2019-0636
CVE-2019-0643
CVE-2019-0648
CVE-2019-0658
CVE-2019-0660
CVE-2019-0661
CVE-2019-0664
CVE-2019-0669
CVE-2019-0676
CVE-2019-0686 *
CVE-2019-0724 *
CVE-2019-0741
Known Issues

4487026
4487020
4486996
4487017
4487044
4483452
4345836
4471392
4471391
4487052
https://portal.msrc.microsoft.com/en...3-000d3a33c573

Windows 10: Microsoft Information Protection SDK at RSA Conference 2019

Microsoft Information Protection SDK at RSA Conference 2019

Microsoft Information Protection SDK at RSA Conference 2019

Microsoft Information Protection SDK at RSA Conference 2019

Microsoft Information Protection SDK at RSA Conference 2019 - Similar Threads - Microsoft Information Protection

Microsoft > Crypto > RSA > MachineKeys Pathway in System32?

NEED INFORMATION FOR DISK PROTECTION

NEED INFORMATION FOR DISK PROTECTION

NEED INFORMATION FOR DISK PROTECTION

RSA SecurID sign-in

Watch Minecraft MINECON 2019 conference on September 28

Watch Intel CES 2019 News Conference - Event Replay

Microsoft Information Protection MIP SDK Private Preview Update

Microsoft at RSA conference USA 2015, April 20-24