SQL Server with Mr. Denny:

Security


May 22, 2008  3:37 PM

EMC World 2008 Day 3



Posted by: Denny Cherry
Billy Crystal, Cache, CLARiiON, EMC, EMC World 2008, Encryption

Wednesday at EMC World was a session packed day to be sure. I started my morning with CLARiiON Rebuild Settings and Data which was an in depth look at how exactly the CLARiiON systems handle rebuilds, and how long various rebuilds take.  In addition we went into detail as to how the CLARiiON...

April 17, 2008  8:00 AM

SQL 2008 one click database encryption gives a false sense of security



Posted by: Denny Cherry
Compliance, DataManagement, Encryption, SQL Server 2008

While I think that the one click database encryption that Microsoft has built into SQL Server 2008 is a good idea, but I'm not sure how useful it actually is.  It's touted as giving you data encryption of the entire database without any code change. What this actually means is that if someone...


April 11, 2008  12:00 PM

Back To Basics: Logins and Users, what’s the difference?



Posted by: Denny Cherry
Back To Basics, LOGIN, USER

Usually Logins and Users are words which are interchangeable with each other.  However in Microsoft SQL Server they are very different things.  Because everyone assumes that they are the same thing, it can get a little confusing. Logins are created at the database server instance level, while...


March 11, 2008  7:41 PM

Identity Theft: A BIG issue for IT Auditors and DBAs



Posted by: Denny Cherry
Database security, Identity theft

Arian Eigen Heald has posted a good blog about identity theft titled "

Bookmark and Share     0 Comments     RSS Feed     Email a friend


January 14, 2008  8:00 AM

Log Shipping without SQL Server Enterprise Edition



Posted by: Denny Cherry
DR, Log Shipping, Replication, SQL, T/SQL

Microsoft's Log Shipping is pretty good.  But it requires that you have SQL Server Enterprise Edition on both the machines.  This makes the solution fairly expensive.  Because of this I've written a replacement which can be used on any edition of SQL Server including SQL Server Express Edition...


December 27, 2007  8:00 AM

Avoiding SQL Injection Attacks



Posted by: Denny Cherry
Attack Prevention, Security, SQL, T/SQL

The most common way for people to insert invalid data or cause damage to your database is through what is called a SQL Injection Attack.  This is when malicious code is placed within the responses which are expected and that code is not caught and it instead executed.  Depending on what level of...