Dynamic Data Masking and Row-Level Security Features on the Way in SQL Server 2016

DYNAMIC DATA MASKING AND ROW-LEVEL SECURITY FEATURES ON THE WAY IN SQL SERVER 2016 In addition to StretchDB and AlwaysEncrypted, there are two more exciting features in the works for SQL Server 2016: dynamic data masking and row-level security. In the case of these two features, they'll be released first to the cloud platform (Azure SQL Database) and, later, to the on-premises version of SQL Server. READ MORE... Originally Posted December 02, 2015 … [Read more...]

Azure Trust Services

You might have noticed that Microsoft has recently launched a cool set of Trust Services for Azure.  This is an application-level encryption framework that can be used to protect sensitive data stored on the Windows Azure Platform. One of the hindrances to adoption of Azure that I keep hearing about is trust and security.  If you want to learn more about protecting your data in the cloud you can read up HERE.  I'm not pushing you to get into Azure (even though you should), nor am I subtly trying to make you feel guilty for ignoring the cloud in general nor Azure specifically (subtle, ain't … [Read more...]

Microsoft Document Watch for Operational Excellence

Back when my day-to-day duties included database administration work and enterprise architecture, I became rather obsessed with the idea of operational excellence.  I read everything I could on the topic.  I made a list of favorites, which became somewhat shabby over time, as I dog-eared important pages and scribbled notes in the margins.  (Perhaps that list of favorites might, in and of itself, make a good blog post).  Fast-forward a decade and I'm still mightily interested in operational excellence for IT organizations.  It's just that so much good material is available for free on the … [Read more...]

DBTA: Security as an Afterthought

If you've read the IT press at all these days, you know that SQL Injection (SI) attacks are very common and can be devastatingly effective. In fact, SI attacks-equally easy to execute against Oracle, MySQL, IBM DB2, or Microsoft SQL Server-are among the most common hacks on the Internet today. If a web application runs a relational database on the backend, it can be subject to an SI attack, which ironically, is among the easiest web hacks to prevent. [READ MORE] … [Read more...]