SQL Server扫盲系列——安全性专题——SQL Server 2012 Security Cookbook

时间：2024-04-18 16:05:37

由于工作需要，最近研究这本书：《Microsoft SQL Server 2012 Security Cookbook》，为了总结及分享给有需要的人，所以把译文公布。预计每周最少3篇。如有兴趣可自行下载英文原版。本系列不保证完全一致。

免责声明：

请尊重原创，本系列文章为翻译，但是并不直译，会根据自己理解适当增删，而且截图也并不直接拿来用。任何人不得把译文用于商业用途。不得在转载过程中作为原创形式发布，否则本人将委托****追究法律责任。

本文只列出目录，对应文章请点击标题链接，已写完的文章会有超链接，没超链接的代表未完成：

Chapter 1: Securing Your Server and Network

  1. Choosing an account for running SQL Server  （选择SQL Server运行账号）
  2. Managing service SIDs  （管理服务的SIDs）
  3. Using a managed service account （使用托管服务帐号）
  4. Using a virtual service account （使用虚拟服务帐号）
  5. Encrypting the session with SSL  （使用SSL加密会话）
  6. Configuring a firewall for SQL Server access   （为SQL Server访问配置防火墙）
  7. Disabling SQL Server Browser  （禁用SQL Server Browser）
  8. Stopping unused services  （停止未使用的服务）
  9. Using Kerberos for authentication  （使用Kerberos用于身份验证）
  10. Using extended protection to prevent authentication relay attacks  （使用扩展保护避免授权中继攻击）
  11. Using transparent database encryption （使用透明数据库加密）
  12. Securing linked server access （保护链接服务器）
  13. Configuring endpoint security   （配置端点安全性）
  14. Limiting functionalities – xp_cmdshell and OPENROWSET  （限制功能——xp_cmdshell 和OPENROWSET）

Chapter 2: User Authentication, Authorization, and Security

  1. Choosing between Windows and SQL authentication  （选择Windows和SQL 身份验证）
  2. Creating logins  （创建登录帐号）
  3. Protecting your server against brute-force attacks  （保护服务器避免暴力攻击）
  4. Limiting administrative permissions of the SA account  （限制sa帐号的管理权限）
  5. Using fixed server roles   （使用固定服务器角色）
  6. Giving granular server privileges  （服务器权限授予粒度）
  7. Creating and using user-defined server roles   （创建和使用用户自定义服务器角色）
  8. Creating database users and mapping them to logins  （创建映射到登录名的数据库用户）
  9. Preventing logins and users to see metadata  （防止登录名和用户查看元数据）
  10. Creating a contained database （创建包含数据库）
  11. Correcting user to login mapping errors on restored databases （在已还原的数据库中修正登录映射错误）

Chapter 3: Protecting the Data

  1. Understanding permissions  （理解权限）
  2. Assigning column-level permissions  （分配列级权限）
  3. Creating and using database roles  （创建和使用数据库角色）
  4. Creating and using application roles  （创建和使用应用程序角色）
  5. Using schemas for security
  6. Managing object ownership
  7. Protecting data through views and stored procedures
  8. Configuring cross-database security
  9. Managing execution-plan visibility
  10. Using EXECUTE AS to change the user context

Chapter 4: Code and Data Encryption

  1. Using service and database master keys
  2. Creating and using symmetric encryption keys
  3. Creating and using asymmetric keys
  4. Creating and using certificates
  5. Encrypting data with symmetric keys
  6. Encrypting data with asymmetric keys and certificates
  7. Creating and storing hash values
  8. Signing your data
  9. Authenticating stored procedure by signature
  10. Using module signatures to replace cross-database ownership chaining
  11. Encrypting SQL code objects

Chapter 5: Fighting Attacks and Injection

  1. Defining Code Access Security for .NET modules
  2. Protecting SQL Server against Denial of Service
  3. Protecting SQL Server against SQL injection
  4. Securing dynamic SQL from injections
  5. Using a SQL firewall or Web Application Firewall

Chapter 6: Securing Tools and High Availability

  1. Choosing the right account for SQL Agent
  2. Allowing users to create and run their own SQL Agent jobs
  3. Creating SQL Agent proxies
  4. Setting up transport security for Service Broker
  5. Setting up dialog security for Service Broker
  6. Securing replication
  7. Securing SQL Server Database Mirroring and AlwaysOn

Chapter 7: Auditing

  1. Using the profiler to audit SQL Server access
  2. Using DML trigger for auditing data modification
  3. Using DDL triggers for auditing structure modification
  4. Configuring SQL Server auditing
  5. Auditing and tracing user-configurable events
  6. Configuring and using Common Criteria Compliance
  7. Using System Center Advisor to analyze your instances
  8. Using the SQL Server Best Practice Analyzer
  9. Using Policy Based Management

Chapter 8: Securing Business Intelligence

  1. Configuring Analysis Services access
  2. Managing Analysis Services HTTP client authentication
  3. Securing Analysis Services access to SQL Server
  4. Using Role-Based Security in Analysis Services
  5. Securing Reporting Services Server
  6. Managing permissions in Reporting Services with roles
  7. Defining access to data sources in reporting services
  8. Managing Integration Services password encryption

本系列文章属于《SQL Server扫盲系列》，转载请引用 http://blog.****.net/dba_huangzj/article/details/19118121

相关文章