SQL Server Security Resources

By Steve Jones, 2002/04/08

Total article views: 5422 | Views in the last 30 days: 13

Rate this |

Join the discussion |

Briefcase

Security Resources for SQL Server

Introduction

As I work with a particular topic or problem, I often research on the Internet different opinions, white papers, etc. Here is a list of resources that are located both on SQL Server Central and other sites that I have found useful.

Online Resources

Recommended	Microsoft SQL Server 2000 Security	A white paper on SQL Server security in a Windows 2000 domain model. Not sure how many of you are actually running in this environment, but it is a well written book.
Highly Recommended	Microsoft Security Bulletin Search	The main search page for security bulletins. You can also register to receive these in email automatically.
Highly Recommended.	Database Security Best Practices	A variety of topics on Administration, Architecture, and Troubleshooting.
Recommended.	Security Best Practices	Slightly off topic, but a good list of best practices for your network. Peruse these at your leisure.
Recommended.	SQLSecurity.com	A nice site by Chip Andrews on SQL Server Security
N/A	Managing Security - Chapter 7 of the SQL Server Administrator's Companion	This is the chapter on security.
N/A	C2 Evaluation for SQL Server 2000	This is the report from the NSA which documents the C2 features of SQL Server.

Bugs and Issues

	Cluster issue when non-admin account used.
	Remove NT admins from sa mapping.

Perspectives from those in the Industry

	SQL Server Encryption Best and Worst Practices	A look at encryption from a database tool vendor.
	Worst Practice - Encrypting Data	Steve Jones examines the point of view that encrypting data is a bad idea.
	Overview of SQL Server Security Model and Best Practices	A look at best practices from a SQL Server MVP.
	SQL Server Security - Part 1	Chris Kempster examines basic security for a SQL Server. This presents an overview of places where you can secure your server.
	SQL Server Security - Part 2	Chris Kempster examines basic security for a SQL Server. This continues the series with looking at passwords, encryption, roles, abd auditing.
	SQL Server Security - Part 3	This article looks at row level security, triggers, and other database security items.

Books

Conclusions

As always, I welcome feedback for this article (use the 'Your Opinion' tab below) and please take the time to rate this article.

Steve Jones
©dkRanch.net March 2002

Return to Steve Jones Home

By Steve Jones, 2002/04/08

Total article views: 5422 | Views in the last 30 days: 13

Your response

Rate this |

Join the discussion |

Briefcase

Digg

Delicious

Technorati

Related tags

More About the Fixed Database Roles

By Andy Warren | Category: Security

| 4,393 reads

Brute Force Spid Management

By Bill Wunder | Category: Security

| 4,941 reads

Microsoft SQL Server 2000 Security

By Additional Articles | Category: Security

Rate this | 1,469 reads

SQL Security Resource Center Opens

By Additional Articles | Category: Security

(not yet rated) | 58 reads

Like this? Try these...

Automating SQL Server Profiler

By Additional Articles | Category: SQL Server 2005

Rate this | 5,020 reads

SQL Server Index Checklist

By Additional Articles | Category: Indexing

Rate this | 4,079 reads

Inside The Question of the Day

By Steve Jones | Category: SQLServerCentral

| 2,318 reads

Free registration required...

To read the rest of this article, and access thousands of other articles, we ask you to register on the site and subscribe to our newsletters.

Login (existing users)

Login

Email: Password: Remember me: Forgotten your password?

Register (new users)

Register

Email: Password:

Confirm:

Subscribing to our newsletters gets you:

ALL of our content (thousands of articles, scripts, and forum postings)
A daily newsletter (example)
A weekly news round up (example)
The opportunity to ask and answer questions in our forums
A daily Question of the Day to test and help you increase your knowledge of SQL Server.

Steve Jones
Editor, SQLServerCentral.com