SQL Server Security

Erscheinungsjahr 2003
ISBN: 978-0-07-222515-0
Verlag: McGraw Hill LLC

Buch, Englisch, 352 Seiten, Format (B × H): 187 mm x 233 mm, Gewicht: 715 g

Publisher's Note: Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product.Protect your data from the most sophisticated hackers with hands-on examples and sure-fire measures in SQL Server Security Understand the ways in which SQL Server can be hacked, and what you can do to prevent exploitation of your data. Install, administer, and program secure Microsoft SQL Server environments and applications. Assess your risk and threat levels when designing a secure system. Make sure your defensive strategies match the threat when considering encryption options. Extend your defenses to include security auditing and intrusion detection. Implementing the techniques in this indispensable security resource is as close as you can get to guaranteed prevention against hackers without turning off the power switch.Covers the latest techniques: - Install and configure your SQL Server environment for maximum security
- Build and maintain a robust and protected database server
- Protect valuable customer information, human resources data, and more
- Defend against application software vulnerabilities and configuration issues
- Ensure that access to data is only granted when appropriate
- Encrypt data into an unreadable form to preserve confidentiality
- Understand the mistakes that contributed to the spread of the SQL Slammer worm
- Rid your applications of SQL injection bugs
- Permit client applications to access the server securely
- Build and utilize an effective auditing and intrusion detection plan

Autoren/Hrsg.

Litchfield, David

Fachgebiete

• Mathematik | Informatik EDV | Informatik Programmierung | Softwareentwicklung Datenbankprogrammierung
• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit Kryptographie, Datenverschlüsselung

Inhaltsverzeichnis

1: SQL Server Security: The Basics 2: Under Siege: How SQL Server Is Hacked 3: SQL Server Installation Tips 4: The Network-Libraries and Secure Connectivity 5: Authentication and Authorization 6: SQL Server in the Enterprise 7: Auditing and Intrusion Detection 8: Data Encryption 9: SQL Injection: When Firewalls Offer No Protection 10: Secure Architectures Appendix A: System and Extended Stored Procedure Reference Appendix B: Additional Technologies that Impact SQL Server Security Appendix C: Connection Strings Appendix D: Security Checklists

Über Autor(innen)

Litchfield, David
David Litchfield (Sutton, Surrey, England) is a world-renowned security expert specializing in Windows NT and Internet security. His discovery and remediation of over 100 major vulnerabilities in products such as Microsoft's Internet Information Server, SQL Server, and Oracle's Application Server have lead to the tightening of sites around the world. David Litchfield is also the author of Cerberus' Internet Scanner (previously NTInfoscan), one of the world's most popular free vulnerability scanners. In addition to CIS, David has written many other utilities to help identify and fix security holes. David is the author of many technical documents on security issues including his tutorial on Exploiting Windows NT Buffer Overruns referenced in the book "Hacking Exposed". David is a prominent speaker at security conferences worldwide and recently spoke on database security at the 2002 Black Hat Conference.

Chip Andrews, MCDBA, MCSE+I, is a Software Security Architect for Claris Corporation as well as an independent security consultant. Chip has more than 16 years of software development experience in the C++, Visual Basic, Java, C#, and T-SQL languages. He is a contributing author to several periodicals including Microsoft Certified Professional Magazine, SQL Server Magazine, and Dr. Dobbs Journal. Chip also has contributed a chapter on SQL Server Security to the book Hacking Exposed Windows 2000 by Osborne. He has given presentations at Black Hat computer security conferences concerning SQL Server security and its role in the secure enterprise.