Securing SQL Server (eBook)

DBAs Defending the Database

Peter A. Carter (Autor)

eBook Download: PDF

2016 | 1st ed.
XIX, 165 Seiten
Apress (Verlag)
978-1-4842-2265-2 (ISBN)

Infos

Protect your data from attack by using SQL Server technologies to implement a defense-in-depth strategy, performing threat analysis, and encrypting sensitive data as a last line of defense against compromise. The multi-layered approach in this book helps ensure that a single breach doesn't lead to loss or compromise of your data that is confidential and important to the business. 

Database professionals in today's world deal increasingly often with repeated data attacks against high-profile organizations and sensitive data. It is more important than ever to keep your company's data secure. Securing SQL Server demonstrates how administrators and developers can both play their part in the protection of a SQL Server environment.

This book provides a comprehensive technical guide to the security model, and to encryption within SQL Server, including coverage of the latest security technologies such as Always Encrypted, Dynamic Data Masking, and Row Level Security. Most importantly, the book gives practical advice and engaging examples on how to defend your data -- and ultimately your job! -- against attack and compromise.

• Covers the latest security technologies, including Always Encrypted, Dynamic Data Masking, and Row Level Security
• Promotes security best-practice and strategies for defense-in-depth of business-critical database assets 
• Gives advice on performing threat analysis and reducing the attack surface that your database presents to the outside world

What You Will Learn

• Perform threat analysis
• Implement access level control and data encryption
• Avoid non-reputability by implementing comprehensive auditing
• Use security metadata to ensure your security policies are enforced
• Apply the latest SQL Server technologies to increase data security
• Mitigate the risk of credentials being stolen

Who This Book Is For 

Securing SQL Server is a book for SQL Server database administrators who need to understand and counteract the threat of attacks against their company's data. The book is also of interest to database administrators of other platforms, as several of the attack techniques are easily generalized beyond SQL Server and to other database brands.


Peter A Carter is a SQL Server expert, with over a decade of experience in developing, administering, and architecting SQL Server platforms and data-tier applications. Peter was awarded an MCC by Microsoft in 2011 to sit alongside his array of MCTS, MCITP, MCSA and MCSE certifications in SQL Server from version 2005 onwards. His passion for SQL Server shows through in everything he does, and his goal is that his passion for the technology will inspire others.

---

Protect your data from attack by using SQL Server technologies to implement a defense-in-depth strategy, performing threat analysis, and encrypting sensitive data as a last line of defense against compromise. The multi-layered approach in this book helps ensure that a single breach doesn't lead to loss or compromise of your data that is confidential and important to the business. Database professionals in today's world deal increasingly often with repeated data attacks against high-profile organizations and sensitive data. It is more important than ever to keep your company's data secure. Securing SQL Server demonstrates how administrators and developers can both play their part in the protection of a SQL Server environment.This book provides a comprehensive technical guide to the security model, and to encryption within SQL Server, including coverage of the latest security technologies such as Always Encrypted, Dynamic Data Masking, and Row Level Security. Most importantly, the book gives practical advice and engaging examples on how to defend your data -- and ultimately your job! -- against attack and compromise.Covers the latest security technologies, including Always Encrypted, Dynamic Data Masking, and Row Level SecurityPromotes security best-practice and strategies for defense-in-depth of business-critical database assets Gives advice on performing threat analysis and reducing the attack surface that your database presents to the outside worldWhat You Will LearnPerform threat analysisImplement access level control and data encryptionAvoid non-reputability by implementing comprehensive auditingUse security metadata to ensure your security policies are enforcedApply the latest SQL Server technologies to increase data securityMitigate the risk of credentials being stolenWho This Book Is For SQL Server database administrators who need to understand and counteract the threat of attacks against their company's data. The book is also of interest to database administrators of other platforms, as several of the attack techniques are easily generalized beyond SQL Server and to other database brands.

Inhalt

1. Threat Analysis2. SQL Server Security Model3. SQL Server Audit4. Data-Level Security5. Encryption in SQL Server 6. Security Metadata7. Implementing Service Accounts for Security8. Protecting Credentials9. Reducing the Attack Surface

Produkt-Details

• Erscheint lt. Verlag: 21.10.2016
• Zusatzinfo: XIX, 165 p. 38 illus., 37 illus. in color.
• Verlagsort: Berkeley
• Sprache: englisch
• Themenwelt: Informatik ► Datenbanken ► SQL Server
• Themenwelt: Informatik ► Netzwerke ► Sicherheit / Firewall
• Schlagworte: Auditing • Countermeasures • credentials • Database Audit • data masking • Encryption • Hardening • Hardening the Database • Impersonation • Ownership Chaining • Public Key Certificates • Row-Level Security • Security auditing • Server Roles • threat analysis • Transparent Data Encryption
• ISBN-10: 1-4842-2265-2 / 1484222652
• ISBN-13: 978-1-4842-2265-2 / 9781484222652