The Curious Engineer

All blogs / Security

SQL Server Security Blog

learn.microsoft.com/en-us/archive/blogs/sqlsecurity

SecurityDatabasesMicrosoft blogsMSDN archive

’10’15’20’25
Posts
136 from 29 Nov 2007 to 29 Mar 2019
Posting
archived, read-only
Kind
company blog
Feed
https://learn.microsoft.com/en-us/archive/blogs/sqlsecurity/feed.xml

2019 1

  1. We have moved!

2018 6

  1. SQL Vulnerability Assessment now supports Azure SQL Data Warehouse and Azure SQL Database Managed Instance
  2. Always Encrypted with Secure Enclaves - Try It Now in SQL Server 2019 Preview!
  3. SQL Audit logs in Azure Log Analytics and Azure Event Hubs
  4. Azure SQL Vulnerability Assessment - now with PowerShell support!
  5. PowerShell cmdlets for managing SQL Vulnerability Assessments
  6. Introducing SQL Information Protection for Azure SQL Database and on-premises SQL Server!

2017 11

  1. Azure Log Analytics (OMS) Agent now collects SQL Server audit logs
  2. SQL Vulnerability Assessment now available for SQL Server 2012 and up
  3. Enabling Confidential Computing with Always Encrypted using Enclaves (Early Access Preview)
  4. Enabling communication traces in C# application for Azure AD authentication with SQL DB using token-based mechanism with Multi-factor authentication (MFA)
  5. Token-based authentication including Multi-factor auth (MFA) for Azure SQL DB using Azure Active Directory (AD)
  6. Now Available: Guide for enhancing privacy and addressing GDPR requirements with the Microsoft SQL platform
  7. Threat Detection in Azure SQL Database is now Generally Available
  8. Newly created Azure SQL databases will be encrypted at rest by default
  9. Certificate-based authentication for Azure SQL DB using Azure Active Directory with recent Azure RM PowerShell version
  10. Blob Auditing in Azure SQL Database is Generally Available
  11. Getting Started with Always Encrypted using PowerShell

2016 11

  1. Parameterization for Always Encrypted - Using SSMS to Insert into, Update and Filter by Encrypted Columns
  2. Azure samples for Azure AD .Net WebApi using Azure AD "on-behalf of token" to connect to SQL DB and SQL DW
  3. Feature Spotlight: Transparent Data Encryption (TDE)
  4. SQL Server Connector support for private Azure clouds
  5. SQL Threat Detection – Your built-in security expert
  6. Always Encrypted in Azure SQL Database is Generally Available
  7. Developing Databases using Always Encrypted with SQL Server Data Tools
  8. SQL Server Connector for Azure Key Vault is Generally Available
  9. SQL Server Connector Public Preview Update
  10. Token-based authentication support for Azure SQL DB using Azure AD auth
  11. Best Practices for Moving Data Encrypted with Always Encrypted

2015 42

  1. Using SQL Server Integration Services (SSIS) with Always Encrypted
  2. Row-Level Security block predicates are generally available on Azure SQL Database
  3. Using Hardware Security Modules with Always Encrypted
  4. Using the Azure Key Vault Key Store Provider for Always Encrypted
  5. Tutorial: Row-Level Security and Entity Framework
  6. Public Preview of Always Encrypted in Azure SQL Database
  7. Azure Key Vault Integration for Azure SQL Server VMs
  8. SSMS Encryption Wizard - Enabling Always Encrypted in a Few Easy Steps
  9. Dynamic Data Masking is now generally available for Azure SQL Database
  10. Oil & Gas Security Demo with SQL Server 2016
  11. New Enhancements in Always Encrypted
  12. Reminder to Update Your SQL Server Connector
  13. Dynamic Data Masking–highlighting the latest improvements
  14. Azure SQL Database Transparent Data Encryption General Availability
  15. New Row-Level Security functionality: Block predicates (preview)
  16. Examples of some connection errors for Azure Active Directory Authentication
  17. Creating Custom Key Store Providers for Always Encrypted (Azure Key Vault Example)
  18. Transparent Database Encryption Preview Issues Resolved
  19. Azure Active Directory Authentication – troubleshooting potential connectivity issues
  20. Azure Active Directory Authentication is in Public Preview
  21. Using Always Encrypted with Entity Framework 6
  22. Public Preview Refresh of SQL Server Connector for Microsoft Azure Key Vault
  23. Row-Level Security for Azure SQL Database is Generally Available
  24. Always Encrypted Key rotation – Column master Key rotation.
  25. Yes, You Really Can
  26. Feedback request: Protecting data in SQL
  27. Encrypting Existing Data with Always Encrypted
  28. Optimizing RLS performance with the Query Store
  29. Always Encrypted Key Metadata
  30. Developing Web Apps using Always Encrypted
  31. Getting Started With Always Encrypted
  32. Apply Row-Level Security automatically to newly created tables
  33. Using CLR to replace xp_cmdshell for specific tasks
  34. Recommendations for using Cell Level Encryption in Azure SQL Database
  35. How to: Scale out multi-tenant apps using RLS and Elastic Database Tools
  36. Announcing Transparent Data Encryption for Azure SQL Database
  37. Row-Level Security: Performance and common patterns
  38. Apply Row-Level Security to all tables -- helper script
  39. Row-Level Security: Blocking unauthorized INSERTs
  40. Row-Level Security for Middle-Tier Apps – Using Disjunctions in the Predicate
  41. Updated MSDN Documentation for Azure SQL Database Row-Level Security
  42. Row-Level Security for Azure SQL Database

2014 2

  1. SQL Application Column Encryption Sample (Codeplex) available
  2. Auditing in Azure SQL Database

2013 1

  1. PVKConverter

2012 5

  1. Filter SQL Server Audit on action_id / class_type predicate
  2. SQL Server 2012 Best Practices Analyzer
  3. Security Best Practice and Label Security Whitepapers
  4. Azure Trust Services
  5. SQL Azure Security Services

2011 8

  1. Meet the team at SQL PASS Summit 2011
  2. Data Hashing in SQL Server
  3. Database Engine Permission Basics
  4. SQL Server 2008 PCI DSS v.2.0 Whitepaper
  5. Integrity checks with EncryptByKey
  6. Prevent Tampering of Encrypting Data Using add_authenticator Argument of EncryptByKey
  7. Revisiting the RC4 / RC4_128 Cipher
  8. Tips for using DB user with password

2010 17

  1. Contained Database Authentication in depth
  2. Contained Database Authentication: How to control which databases are allowed to authenticate users using logon triggers
  3. Contained Database Authentication: Monitoring and controlling contained users
  4. Contained Database Authentication: Introduction
  5. Guest account in User Databases
  6. rand vs. crypt_gen_random
  7. Security Checklists on TechNet Wiki
  8. DEK and the Log
  9. Database Encryption Key (DEK) management
  10. TDE, DEK and the LOG
  11. Blocking automated SQL injection attacks
  12. SQL Server Authentication Troubleshooter
  13. Presentation on SQL Security
  14. Open positions @ SQL Server
  15. RSA Conference 2010
  16. HIPAA Compliance with SQL Server 2008
  17. Quick security references (QSR) on Cross-Site scripting and SQL injection.

2009 17

  1. Consolidation Guidance for SQL Server
  2. How To: Share a Single EKM Credential among Multiple Users
  3. Filtering (obfuscating) Sensitive Text in SQL Server
  4. Link to Lyudmila’s blog
  5. Arx the latest vendor to support EKM
  6. How To Choose Audit Action Group When Using Auditing in SQL Server 2008
  7. Thales/nCipher announces EKM support for SQL Server 2008
  8. PCI DSS Compliance with SQL Server 2008
  9. SQL Server EncryptByKey cryptographic message description
  10. Enforce Windows Password Policy on SQL Server Logins
  11. Interested in Compliance?
  12. Feedback requested: Default schemas for Windows groups
  13. Performance of Impact of Auditing in SQL Server 2008
  14. Auditing in SQL Server 2008 white paper
  15. Data Protection Day, January 28th
  16. About DEK rotation and log backup in Transparent Database Encryption (TDE)
  17. First HSM for SQL Server 2008 released!

2008 13

  1. Configuring SQL Audit using the Audit Dynamic Management Views
  2. How to create a SQL trace using T-SQL
  3. Caregroup CIO Blogs about using Auditing
  4. SQL Server 2008 Compliance Guide
  5. SQL Audit Buffering and Error Handling
  6. SQL Server 2008 Security Whitepapers
  7. Accessing the calling context in modules that use EXECUTE AS
  8. Microsoft ® Source Code Analyzer for SQL Injection – July 2008 CTP
  9. SQL Server and the Windows Server 2008 Firewall
  10. Getting started with Microsoft ® Source Code Analyzer for SQL Injection
  11. Microsoft ® Source Code Analyzer for SQL Injection – June 2008 CTP
  12. SQL Server 2005 Encryption – Encryption and data length limitations (feedback page)
  13. xp_cmdshell

2007 2

  1. The TRUSTWORHY bit database property in SQL Server 2005
  2. OPEN SYMMETRIC KEY scope in SQL Server