Brian Kelley

Brian Kelley is an author, columnist, and Microsoft SQL Server MVP focusing primarily on SQL Server security. He is a contributing author for How to Cheat at Securing SQL Server 2005 (Syngress), Professional SQL Server 2008 Administration (Wrox), and Introduction to SQL Server (Texas Publishing). Brian currently serves as an infrastructure and security architect. He has also served as a senior Microsoft SQL Server DBA, database architect, developer, and incident response team lead.

Interests: Chess, Reading, Soccer (Football), Baseball, Animals, Theology

Database DoS Whitepaper from Securosis

by Brian Kelley

Databases – Infrastructure – Security

Securosis has released a whitepaper on their research with regards to database denial-of-service attacks. This whitepaper is platform agnostic. It...

2013-09-11

2,043 reads

Sometimes I don't understand Microsoft's vulnerability classifications

by Brian Kelley

Databases – Infrastructure – Security

Here's a great example:

MS13-079 - Vulnerability in Active Directory Could Allow Denial of Service (2853587)

Basically, this patches a vulnerability where an...

2013-09-10

1,884 reads

Good Intro Podcast on Hadoop

by Brian Kelley

Databases – Infrastructure – Security

Have you heard about Hadoop but don't know much about it? What about "big data?" Would you like an intro...

2013-09-09 (first published: 2013-09-03)

2,115 reads

Is Microsoft's Certification Program Value Microsoft's Fault?

by Brian Kelley

Databases – Infrastructure – Security

I'd be interested if anyone says, "No," to that question. Gail Shaw raised a few points in this post about...

2013-09-04

2,006 reads

Before Asking for Help...

by Brian Kelley

Databases – Infrastructure – Security

I have a standard rule that I use before going and bugging a co-worker or posting via social media/message forum about...

2013-08-29

1,886 reads

Specify the Parameter Names for Stored Procedures

by Brian Kelley

Databases – Infrastructure – Security

I just ran across a case where a script was failing. Here's the part that's failing:

EXEC sp_addrolemember 'MyDomain\MyGroup', 'SomeRole';
GO
Do...

2013-08-27 (first published: 2013-08-23)

4,495 reads

Schneier's Thoughts on the Future of IT Security and the Impact of the Internet on Power

by Brian Kelley

Databases – Infrastructure – Security

If you've got an hour to spare, you might want to check out this presentation by Bruce Schneier where he...

2013-08-23 (first published: 2013-08-15)

1,667 reads

Boorish Behavior? No, Worse. Death Threats Against Developers/Designers.

by Brian Kelley

Databases – Infrastructure – Security

I know DBAs and developers have a rocky relationship. However, I don't believe we go as far as some of...

2013-08-16

836 reads

Windows Phone Security Advisory - Weakness in Security Protocol

by Brian Kelley

Databases – Infrastructure – Security

If you're using a Windows phone, versions 7.8 or 8, there is a new security advisory out with respect to...

2013-08-06

630 reads

More on SQL Server Built-In Cryptography Options

by Brian Kelley

Databases – Infrastructure – Security

I wrote a series of articles at MSSQLTips.com to cover the cryptographic algorithms that are available with Microsoft SQL Server....

2013-08-02

865 reads

Blogs

Fighting Procrastination?

By Brian Kelley

Here is another short video (~ 15 minutes). This is by the author of...

A Fun Prize at the PASS Data Community Summit

I had a briefing for the 2026 PASS Data Community Summit, which is just...

How to Measure AI Value: A 6-Branch AI Maturity Model for Use Cases and Agents

By Joyful-Craftsmen

Your AI is busy. But do you know what it's worth? Most companies can...

Read the latest Blogs

Forums

SQL Server 2025 Server-level Roles

By Steve Jones - SSC Editor

Comments posted to this topic are about the item SQL Server 2025 Server-level Roles

Stairway to DAX and Power BI - Level 29: The DAX Combine & Aggregate Functions

By Bill Pearson

Comments posted to this topic are about the item Stairway to DAX and Power...

AI Is Improving Security

By Steve Jones - SSC Editor

Comments posted to this topic are about the item AI Is Improving Security

Visit the forum

Question of the Day

SQL Server 2025 Server-level Roles

In SQL Server 2022+, what does the ##MS_DatabaseConnector## role allow?

See possible answers