security

SQLServerCentral Article

Can We Please Stop Sending Passwords Over the Wire?

  • Article

While analyzing SQL Server's network protocol, I came across a weird fact: when a database client logs in using SQL Server authentication (as opposed to Windows authentication), it has to send the user's password to the server, in blatant violation of common security guidelines. At first, I couldn't believe it; SQL Server generally does an […]

5 (8)

You rated this post out of 5. Change rating

2022-03-02

5,179 reads

SQLServerCentral Article

Query control made easy

  • Article

Overview As we all know, data security is a never-ending battle. Every day, we hear of new data breaches. It's a hard problem, and there is no single solution, other than a defense in depth. Let's look at one of those defenses for databases: query control. Query control is a simple idea: most applications access […]

4.25 (4)

You rated this post out of 5. Change rating

2022-01-07

3,872 reads

SQLServerCentral Article

SQL Server Data Classification Comes Alive

  • Article

Overview Microsoft SQL Server 2012 introduced a feature called data classification, which allows you to mark certain columns with labels, indicating that these columns contain sensitive or special-handling data. For instance, you may want to mark a column containing credit card numbers as "confidential", or sales numbers as "management only". The problem is that you […]

5 (1)

You rated this post out of 5. Change rating

2021-12-10

4,925 reads

SQLServerCentral Article

SQL Server Data Masking: a comparison with Gallium Data

  • Article

Introduction In SQL Server 2016, Microsoft introduced a new feature called dynamic data masking, which allows you to mask the values of certain columns and keep that data hidden from certain users, without having to modify your applications. Let's take a look at how SQL Server does data masking, and compare it to the way Gallium Data […]

You rated this post out of 5. Change rating

2021-12-03

1,723 reads

Blogs

Query deadlock info in Azure SQL DB

By

A couple of weeks ago, a developer came to me and wanted to know...

MSSQL Database Property LastGoodCheckDbTime to Get the Last Successful DBCC CHECKDB on a Database

By

Database Property LastGoodCheckDbTime to Get the Last Successful DBCC CHECKDB on a Database As one...

Dynamic Warehouse & Lakehouse Connections in Microsoft Fabric Data Pipelines

By

When you develop data pipelines in Microsoft Fabric (the Azure Data Factory equivalent in...

Read the latest Blogs

Forums

Baseball Everywhere

By Ryan Booz

Comments posted to this topic are about the item Baseball Everywhere

How to run custom python module on SQL Server?

By yyang5823

I am working on a small test script on SQL server 2022 using python...

Upgrade to SQL2019 from 2012 Query is taking time, Need Query Optimization steps

By ralahari

Upgrade to SQL2019 from 2012 Query is taking time, Need Query Optimization steps and...

Visit the forum

Question of the Day

Sensitivity Ranks

I want to use the ADD SENSITIVITY CLASSIFICATION DDL to mark some columns in my SQL Server 2022 database as PII. Can I use this code?

ADD SENSITIVITY CLASSIFICATION TO dbo.sales.price,
    dbo.sales.discount
WITH (
    LABEL = 'Highly Confidential',
    INFORMATION_TYPE = 'Financial',
    RANK = 'INTERNAL ONLY'
);

See possible answers