Security

External Article

SQL Server 2005 Part 1 - Security (Authentication)

  • Article

In this installment of our series covering new and improved functionality of SQL Server 2005 Beta 2, we will focus on the topic of security, which has been becoming increasingly prominent among the issues on every database and system administrator's agenda. A new approach to software development started with the Trustworthy Computing initiative launched in early 2002, necessitated by the growing number of exploits directed at the Microsoft operating system and applications, resulted in a "secure by default" product with highly customizable security features further increasing the degree of protection. We will start with the features related to authentication (the process of identifying logins connecting to the SQL Server and users accessing databases), and continue with authorization (determining the level of permissions granted once the initial connection is established) and encryption in the future articles. In particular, we will cover here, password policy implementation and management as

2005-02-01

5,709 reads

SQLServerCentral Article

Removing the Builtin Administrators - Some Pitfalls to Avoid

  • Article

The SQL Server 2000 security model is not the best one of all the RDBMS platforms and requires some work to secure properly. One of the practices that is recommended is removing the builtin/administrators group from accessing the SQL Server. New author Kathi Kellenberger shows us some of the pitfalls she encountered when removing this group from her servers.

(4)

You rated this post out of 5. Change rating

2007-10-02 (first published: )

30,113 reads

Technical Article

Manipulating Microsoft SQL Server Using SQL Injection

  • Article

Focuses on advanced techniques that can be used in an attack on an application utilizing Microsoft SQL Server as a backend. These techniques demonstrate how an attacker could use a SQL Injection vulnerability to retrieve the database content from behind a firewall and penetrate the internal network. Also provided are recommendations on how to prevent such attacks.

2005-01-05

2,626 reads

Blogs

From SQL Saturday to Day of Data

By

A behind-the-scenes look at Day of Data Jacksonville 2026, the transition from SQL Saturday,...

PostgreSQL 18 Finally Makes BUFFERS the Default. Here Is Why That Matters

By

You run EXPLAIN ANALYZE on a slow query, stare at the plan, and something...

A New Word: La Guadière

By

la guadière – n. a glint of goodness you notice in something that you...

Read the latest Blogs

Forums

non ascii columns in a utf-8 .txt file

By stan

hi, we couldnt get our upstream data source developers to supply what is sometimes...

PolyBase Trace Flags

By Leo.Miller

Are there any good articles on all the trace flags that are enabled on...

The Data Model Matters

By Steve Jones - SSC Editor

Comments posted to this topic are about the item The Data Model Matters

Visit the forum

Question of the Day

Running SQLCMD I

I run the SQLCMD utility as follows:

lcmd -S localhost -E
I then type this (the 1> is the prompt):
1> select @@version go
If I hit enter, what happens?

See possible answers