Designed as a comprehensive look at securing SQL Server 2000, this book walks the reader through the basics of security and how it applies to a SQL Server install. The focus of the book then shifts to the internal mechanisms SQL Server uses to protect data and audit access. Later, external security and vulnerabilities due to applications and the operating system are examined. Network vulnerabilities with respect to the transmission of login information as well as unsecured data streams are also discussed. In addition, several third-party tools that can assist in auditing, securing, and reporting on SQL Server are reviewed.
Auflage
Sprache
Verlagsort
Verlagsgruppe
Springer-Verlag Berlin and Heidelberg GmbH & Co. KG
Zielgruppe
Für Beruf und Forschung
Professional/practitioner
Maße
ISBN-13
978-1-59059-094-2 (9781590590942)
Copyright in bibliographic data and cover images is held by Nielsen Book Services Limited or by the publishers or by their respective licensors: all rights reserved.
Schweitzer Klassifikation
K. Brian Kelley is currently an Enterprise Systems Architect with AgFirst Farm Credit Bank in Columbia, SC. Prior to that he served as a senior DBA and Web developer with AgFirst. His primary responsibilities include overhauling the current Windows NT infrastructure to provide for a highly available, network-optimized framework that is Active Directory ready. Brian assumed his Architect role in December 2001. He has been at AgFirst since January of 2000 when he originally came on-board as an Intranet web developer and database programmer. Prior to AgFirst, Brian worked as a system administrator and web developer for BellSouth's Yellow Pages group and served on active duty as an officer with the US Air Force. He has been a columnist at SQL Server Central since July 2001.
Part 1: Introduction: The Need for SQL Server Security; Formulating a Security Policy.- Part 2: Inside (Authorization): Fixer Server Roles; Leveraging Stored Procedures; Additional Security Measures; Locking Down System Tables.- Part 3: Outside (Authentication/Network): Understanding Authentication; Secure and Insecure Protocols; Leveraging Windows; Protecting Backups; Securing Applications; Auditing Your Environment; Security Tools; Changes Due to "Yukon".
