SQL Server: Security for Developers

SQL Server: Security for Developers

1h 27mBeginner2018-09-11

Authors

Joey D'Antoni

Joey D'Antoni

Consultant and Thought Leader

Course details

Learn how to protect databases and preserve the integrity of an organization's data by configuring the security settings in SQL Server. This course covers how to use built-in options on Microsoft platforms, including Azure AD, to secure database and network infrastructure. Learn about establishing users, assigning roles, and granting privileges. Find out how to prevent SQL Server from malicious injection by addressing vulnerabilities. Discover how to encrypt data at rest and in-transit. See how to build a robust security model for your applications. Additionally, learn how to encrypt connections and secure a network.

Learning objectives
Building secure applications in SQL Server
Configuring authentication in Azure AD
Assigning user roles and privileges
Building custom roles
Creating contained users
Protecting SQL Server from injection
Identifying vulnerabilities
Writing strong procedures
Checking inputs
Using dynamic parameterization
Encrypting network connections
Securing linked servers
Configuring firewalls

Skills covered

SQL ServerDatabase AdministrationDatabase ManagementPersonaMicrosoft

Concepts

Introduction

  • Build secure applications in SQL Server
  • Course software

Roles and Privileges in SQL Server

  • Logins and users
  • Azure AD and SQL authentication
  • Demo - Create a user in SQL Server
  • Roles and privileges overview
  • Least privileges principal
  • Building custom roles in SQL Server
  • Demo - Building custom roles
  • Predefined roles in SQL Server
  • Roles in Azure SQL Database
  • Contained users and their benefits
  • Demo - Contained users

SQL Injection

  • Overview of SQL injection
  • SQL injection vulnerabilities
  • Writing proper SQL procedures
  • Demo - Stored procedures vs. dynamic SQL
  • Dynamic SQL and input checking
  • Demo - Dynamic SQL parameterization
  • External protection around SQL injection

Securing Your Network

  • Network security
  • Encrypting connections to SQL Server
  • TLS 1.0 vs. TLS 1.2
  • Upgrading TLS with SQL Server
  • Linked server security
  • Demo - Linked servers
  • Azure SQL Database firewalls
  • Demo - Azure SQL Database firewalls

Conclusion

  • Next steps
40,000 Toman