Security

Within Which Context Does SQL Server Access Network Resources?

by

In this post, we discuss about the context within which SQL Server accesses network resources via the Database Engine and SQL Agent.   How Does SQL Server Access Network Resources When you run adhoc queries (i.e. execute stored procedures, use OPENROWSET, etc.) targeting resources outside the scope of the SQL Server instance (i.e. a file … Read more…

Using the C# SqlParameter Object for Writing More Secure Code

by

C# SqlParameter is a handy feature allows you to safely pass a parameter to a SqlCommand object in .NET. A security best practice when writing .NET data access code, is to always use parameters in SqlCommand objects (whenever parameters are required of course). The reason for this, is that parameters help prevent SQL injection attacks. … Read more…

Quick Tip: SQL Server Support for TLS 1.2

by

This short post discusses SQL Server Support for TLS 1.2. It is a recommended security best practice, to upgrade to Transport Layer Security (TLS) protocol 1.2 as several known vulnerabilities have been reported against SSL and earlier versions of TLS. Many of us who work with SQL Server, we needed – or will need at a … Read more…