SQL Server: Security, Encryption, and Masking

1hBeginner2018-09-19

Authors

Joey D'Antoni

Consultant and Thought Leader

Course details

Learn how to build more secure applications using the advanced security features in SQL Server 2017. Instructor Joey D'Antoni takes a deep dive into SQL Server row-level security, which allows you to restrict access to specific table data, and shows how to encrypt data using the built-in features in SQL Server, such as Always Encrypted, which protects sensitive client data without revealing encryption keys. Plus, discover how to perform data masking to prevent low-privileged users from seeing confidential information.

Learning objectives
Designing row-level security
Using views to implement row-level security in SQL Server pre-2016
Data encryption
Configuring Always Encrypted
Dynamic data masking

Skills covered

SQLDatabase AdministrationDatabase ManagementPersonaOpen Source

Concepts

Introduction

Reduce coding pains by optimizing security features in SQL 2017
Course software

Row-Level Security (RLS)

Get started with row-level security
Design a row-level security model
Demo - Row-level security
Implement row-level security
Use views to implement RLS pre-2016
Demo - RLS with views
Other options for multi-tenant databases

Encryption in SQL Server

Introduction to encryption in SQL Server
What data should I encrypt
Cell-level encryption
Demo - Cell-level encryption
Always Encrypted
Demo - Implement Always Encrypted
Demo - Azure Key Vault with Always Encrypted
Manage Always Encrypted keys

Data Masking in SQL Server

Data masking and SQL Server
Demo - Dynamic data masking
Demo - Build a masked set of data for testing
Limits of dynamic masking

Conclusion

Next steps