Dynamic Data Masking and Row-Level Security Features on the Way in SQL Server 2016

DYNAMIC DATA MASKING AND ROW-LEVEL SECURITY FEATURES ON THE WAY IN SQL SERVER 2016 In addition to StretchDB and AlwaysEncrypted, there are two more exciting features in the works for SQL Server 2016: dynamic data masking and row-level security. In the case of these two features, they'll be released first to the cloud platform (Azure SQL Database) and, later, to the on-premises version of SQL Server. READ MORE... Originally Posted December 02, 2015 … [Read more...]

Stronger Security Via Always Encrypted in SQL Server 2016

STRONGER SECURITY VIA ALWAYS ENCRYPTED IN SQL SERVER 2016 Prior to SQL Server 2016, currently in CTP, your main method for encrypting a SQL Server application was to use a feature called Transparent Data Encryption. TDE provides strong encryption, but with some shortcomings. First, you have to encrypt an entire database. No granularity is offered at a lower level, such as encrypting specific tables or certain data within a table. Second, TDE encrypts only data at rest, in files. Data in memory or in-flight between the application and server are unencrypted. Enter Always Encrypted. READ … [Read more...]

Microsoft Document Watch for Operational Excellence

Back when my day-to-day duties included database administration work and enterprise architecture, I became rather obsessed with the idea of operational excellence.  I read everything I could on the topic.  I made a list of favorites, which became somewhat shabby over time, as I dog-eared important pages and scribbled notes in the margins.  (Perhaps that list of favorites might, in and of itself, make a good blog post).  Fast-forward a decade and I'm still mightily interested in operational excellence for IT organizations.  It's just that so much good material is available for free on the … [Read more...]