Browse by Tags

• attacks
• audit
• authorization
• best practice
• blogs
• bol
• books online
• clustering
• cryptography
• databases
• disable
• encryption
• failover
• injection
• kerberos
• login
• logins
• management
• microsoft
• mixed
• password
• performance
• policy
• reference
• sa
• security
• sql authentication
• windows

SQL Injection attacks - don't forget to visit guidance information from Microsoft
31 May 08 01:59 PM | SQL Master | 4 Comments   

One of the biggest threats in IT industry & Database world is unprecedented attacks aka most commonly termed as 'SQL injection'. There is no doubt that biggest database vendors, one of them as Microsoft so far providing recommendations regarding security-related Read More...

Filed under: sql server, security, authentication, best practice, blogs, injection, reference, attacks

SQL Server logins - enforce Password Expiration and policies
07 January 08 12:11 PM | SQL Master | 2 Comments   

Here is a quick snippet on enabling a SQL login to password expiration and password policies as per the Windows server: Open the SQL Server 2005 Management Studio. In the left pane, go to the desired server and navigate to the Security folder and expand Read More...

Filed under: sql server, security, windows, authentication, best practice, logins, bol, sql authentication, books online, password, policy

SQL Server 2005 using Cryptography & Encryption what they are for?
13 September 07 05:46 AM | SQL Master | 2 Comments   

Since the inception of SQL Server 2005 data encryption and cryptography functionality has elevated to a new level, this wasn't the case until SQL 2000 version. The overall security improvements within SQL 2005 is mainly with 'certficate' authentication, Read More...

Filed under: authentication, authorization, cryptography, performance, sql server, microsoft, security, databases, audit, encryption

Information and issues with Kerberos security within SQL Server 2005?
31 August 07 02:45 AM | SQL Master | 2 Comments   

What is the Kerberos Authentication? What are the security features difference between Windows 2000 and 2003 versions? How it is behaved within Failover Clustering? How to enable Kerberos Authentication Including SQL Server Virtual Servers on Server Clusters? Read More...

Filed under: sql server, security, audit, windows, authentication, clustering, failover, kerberos

Disable SA account on a live SQL Server2005 instance, any drawbacks?
13 August 07 02:03 AM | SQL Master | 2 Comments   

Last week I have been delegated to finalize the security standards within a set of SQL 2005 instances that are used by a customer, though it is usual chores for me to apply industry best practices. On these SQL 2005 instances in particular I was more Read More...

Filed under: sql server, microsoft, security, management, login, windows, mixed, authentication, sa, disable