Browse by Tags

SQL Injection attacks - don't forget to visit guidance information from Microsoft

Published 31 May 8 3:59 PM | SSQA.net

One of the biggest threats in IT industry & Database world is unprecedented attacks aka most commonly termed as 'SQL injection'. There is no doubt that biggest database vendors, one of them as Microsoft so far providing recommendations regarding...

Filed under: sql server, blogs, security, best practice, injection, authentication, attacks, reference

SQL Server logins - enforce Password Expiration and policies

Published 7 January 8 1:11 PM | SSQA.net

Here is a quick snippet on enabling a SQL login to password expiration and password policies as per the Windows server: Open the SQL Server 2005 Management Studio. In the left pane, go to the desired server and navigate to the Security folder and expand...

Filed under: sql server, security, windows, BOL, password, best practice, authentication, books online, policy, logins, sql authentication

SQL Server 2005 using Cryptography & Encryption what they are for?

Published 13 September 7 7:46 AM | SSQA.net

Since the inception of SQL Server 2005 data encryption and cryptography functionality has elevated to a new level, this wasn't the case until SQL 2000 version. The overall security improvements within SQL 2005 is mainly with 'certficate' authentication...

Filed under: sql server, performance, databases, microsoft, security, audit, encryption, authentication, authorization, cryptography

Information and issues with Kerberos security within SQL Server 2005?

Published 31 August 7 4:45 AM | SSQA.net

What is the Kerberos Authentication? What are the security features difference between Windows 2000 and 2003 versions? How it is behaved within Failover Clustering? How to enable Kerberos Authentication Including SQL Server Virtual Servers on Server Clusters...

Filed under: sql server, security, windows, audit, clustering, authentication, failover, kerberos

Disable SA account on a live SQL Server2005 instance, any drawbacks?

Published 13 August 7 4:3 AM | SSQA.net

Last week I have been delegated to finalize the security standards within a set of SQL 2005 instances that are used by a customer, though it is usual chores for me to apply industry best practices. On these SQL 2005 instances in particular I was more...

Filed under: sql server, management, microsoft, security, windows, login, sa, disable, authentication, mixed