Tag: security management

• Common Database Vulnerabilities: Privilege Abuse

  

  2014-08-18 - Common Database Vulnerabilities, General, Security, Series

  Privilege abuse comes in two forms: Abuse of excessive and of legitimate privileges. Discover how to protect your environment from this vulnerability.

  [more…]

• Auditing SQL Server Password Strength using PWDCOMPARE

  

  2014-06-27 - DMVs & CVs, General, Passwords, Security, Security

  SQL Server stores passwords as salted hash values, preventing us from directly checking or enforcing their strength. However, using PWDCOMPARE we can try to crack them to identify weak ones.

  [more…]

• The SQL Server Encryption Hierarchy

  

  2014-04-20 - Cryptography, Encryption Hierarchy, General, Security, Series

  Discover how in SQL Server the different encryption keys can build a complex encryption hierarchy in which one key protects the next.

  [more…]

• Auto Fix Orphaned Users

  

  2014-04-18 - General, Security

  To auto fix orphaned users safely is a surprisingly complex task. But, as demonstrated in this article, it is possible if you follow a handful of rules.

  [more…]

• Scripting All Logins on a SQL Server Instance

  

  2014-04-14 - General, Queries, Security

  Scripting all logins on a SQL Server instance can be helpful e.g. when setting up a test or development environment. Read on to see an example query for just this purpose.

  [more…]