While analyzing SQL Server's network protocol, I came across a weird fact: when a database client logs in using SQL Server authentication (as opposed to Windows authentication), it has to send the user's password to the server, in blatant violation of common security guidelines. At first, I couldn't believe it; SQL Server generally does an […]
2022-03-02
4,421 reads
Overview As we all know, data security is a never-ending battle. Every day, we hear of new data breaches. It's a hard problem, and there is no single solution, other than a defense in depth. Let's look at one of those defenses for databases: query control. Query control is a simple idea: most applications access […]
2022-01-07
3,234 reads
Overview Microsoft SQL Server 2012 introduced a feature called data classification, which allows you to mark certain columns with labels, indicating that these columns contain sensitive or special-handling data. For instance, you may want to mark a column containing credit card numbers as "confidential", or sales numbers as "management only". The problem is that you […]
2021-12-10
3,461 reads
Introduction In SQL Server 2016, Microsoft introduced a new feature called dynamic data masking, which allows you to mask the values of certain columns and keep that data hidden from certain users, without having to modify your applications. Let's take a look at how SQL Server does data masking, and compare it to the way Gallium Data […]
2021-12-03
1,118 reads
A quick look at how the native SQL Server Row-Level Security compares with Gallium Data's solution for limiting access to rows of data.
2021-11-15
1,457 reads
By Steve Jones
I started to add a daily coping tip to the SQLServerCentral newsletter and to...
By Steve Jones
I started to add a daily coping tip to the SQLServerCentral newsletter and to...
This is one of those things that on hindsight was a stupid problem, but...
In a ransomware disaster recovery situation, we have a physical server that we are...
Hi All, We have Project server 2019 (Sharepoint). The database server (Only Database services...
Hi Everyone, Good morning. I am new to Sql administration.Have one question. We work...
Ask SSC