Securing SQL Server: DBAs Defending the Database

Peter A. Carter

  • 出版商: Apress
  • 出版日期: 2016-10-21
  • 售價: $1,270
  • 貴賓價: 9.5$1,207
  • 語言: 英文
  • 頁數: 188
  • 裝訂: Paperback
  • ISBN: 1484222644
  • ISBN-13: 9781484222645
  • 相關分類: MSSQLSQL資料庫
  • 海外代購書籍(需單獨結帳)

買這商品的人也買了...

商品描述

Protect your data from attack by using SQL Server technologies to implement a defense-in-depth strategy, performing threat analysis, and encrypting sensitive data as a last line of defense against compromise. The multi-layered approach in this book helps ensure that a single breach doesn't lead to loss or compromise of your data that is confidential and important to the business. 
 
Database professionals in today's world deal increasingly often with repeated data attacks against high-profile organizations and sensitive data. It is more important than ever to keep your company’s data secure. Securing SQL Server demonstrates how administrators and developers can both play their part in the protection of a SQL Server environment.
 
This book provides a comprehensive technical guide to the security model, and to encryption within SQL Server, including coverage of the latest security technologies such as Always Encrypted, Dynamic Data Masking, and Row Level Security. Most importantly, the book gives practical advice and engaging examples on how to defend your data -- and ultimately your job! -- against attack and compromise.
  • Covers the latest security technologies, including Always Encrypted, Dynamic Data Masking, and Row Level Security
  • Promotes security best-practice and strategies for defense-in-depth of business-critical database assets 
  • Gives advice on performing threat analysis and reducing the attack surface that your database presents to the outside world

What You Will Learn

  • Perform threat analysis
  • Implement access level control and data encryption
  • Avoid non-reputability by implementing comprehensive auditing
  • Use security metadata to ensure your security policies are enforced
  • Apply the latest SQL Server technologies to increase data security
  • Mitigate the risk of credentials being stolen
Who This Book Is For 
 

SQL Server database administrators who need to understand and counteract the threat of attacks against their company’s data. The book is also of interest to database administrators of other platforms, as several of the attack techniques are easily generalized beyond SQL Server and to other database brands.

商品描述(中文翻譯)

保護您的數據免受攻擊,使用SQL Server技術實施深度防禦策略,進行威脅分析,並將敏感數據加密作為最後的防禦線,以防止被破壞。本書中的多層方法有助於確保單一漏洞不會導致機密且對業務重要的數據的損失或破壞。

在當今世界中,數據庫專業人員越來越經常面對針對知名組織和敏感數據的重複攻擊。保護公司的數據安全比以往任何時候都更加重要。《Securing SQL Server》展示了管理員和開發人員如何在保護SQL Server環境方面發揮作用。

本書提供了一個全面的技術指南,介紹了安全模型和SQL Server中的加密,包括最新的安全技術,如Always Encrypted、Dynamic Data Masking和Row Level Security。最重要的是,本書提供了實用的建議和引人入勝的示例,教您如何保護數據,最終保護您的工作,防止受到攻擊和破壞。

本書涵蓋了最新的安全技術,包括Always Encrypted、Dynamic Data Masking和Row Level Security,提倡業務關鍵數據庫資產的深度防禦策略和最佳實踐,並提供了有關進行威脅分析和減少數據庫對外界攻擊面的建議。

您將學到什麼:
- 進行威脅分析
- 實施訪問級別控制和數據加密
- 通過實施全面的審計來避免不可否認性
- 使用安全元數據確保執行安全策略
- 應用最新的SQL Server技術來增加數據安全性
- 減輕憑證被盜的風險

本書適合對抗公司數據攻擊威脅的SQL Server數據庫管理員。對於其他平台的數據庫管理員也具有興趣,因為其中一些攻擊技術很容易推廣到SQL Server以外的其他數據庫品牌。