Prevent Confidential Data at the Application Layer from getting into SQL Server

In this tip Tim Smith looks at different approaches to stop confidential data from getting into the database.

A few reflections on security by a weary application developer

Data security? No worries! Tell me how much you are willing to pay.

Change password for user 'sa'

Last week one of my team members was supposed to create a SQL Authenticated ID on a SQL Server 2005 instance. This was as per the request of the Application team who would be using it for an Application.

Data Driven Security

Set a security standard across environments that developers can see and run, but not change.

New SQL Server 2014 Permissions: CONNECT ANY DATABASE

CONNECT ANY DATABASE is one of three new permissions in SQL Server 2014 that can be granted to server logins. What is this new permission good for and why would we ever want this?

The Case Of the Downward Pointing Arrow

Reading, Writing, and Riskmetic

Cloud Storage Security: Are You Doing Your Part?

If the level cloud storage encryption are so high, then why is the cloud security industry experiencing such distrust?

I Gotta See the Code

Access Granted or Not?