| Welcome to vBulletin FAQ |
vBulletin FAQ Navigation
Getting Started
Customizing your vBulletin
Search Engines & SEO
Making Money with a Forum
Promoting your Community
|
| Get your own vBulletin Today |
|
| Webmaster Help |
|
|
|
SQL Server Security
vBulletin Book Store > vBulletin books beginning with S
|
SQL Server Security |
Author: David Litchfield
Published: 2003-08-27 |
List price: $49.99
Our price: $34.99
|
Usually ships in 24 hours
As of: December 02nd, 2008 09:38:01 PM
|
|
|
Customer comments on this selection.
 Clearly addresses SQL Server vulnerabilities
SQL Server Security by David Lichtfield clearly addresses SQL Server vulnerabilities and provides security solutions, as well as covering installation, administration, and programming, plus security issues such as authentication, encryption, intrusion detection, and more. Written for IT professionals administering or programming any SQL Server-based application, SQL Server Security includes coverage of SQL Server 7, SQL Server 2000, and SQL Server (Yukon).
Excellent coverage
Having read about half of this book, I can say that each chapter has not disappointed me. As a mid-level DBA, this book has helped bring things together in my mind that seemed like a loose collection before. I would highly recommend this book to anyone wanting to beef up their knowledge of security with SQL Server. The authors have done an excellent job. It's easy to read and chapters are reasonably short and concise with just the right amount of illustrations.
 u use SQL? u better read this!
If you do anything with SQL and need top secure it, please read this book.pSecuring SQL is not rocket science, but it is easy to do wrong.pThis book shows how to do it right.
Chip Andrews and crew deliver a title worthy of its lineage
"SQL Server Security" (SSS) is a great security book, free of the bloat the affects both operating systems and many technical volumes. Weighing in at 322 pages, it's packed with the detail needed to securely deploy Microsoft SQL servers. Although many people contributed to the text, it doesn't suffer from internal redundancy. I highly recommend anyone operating SQL servers devour this book.pIn the "Acknowledgements," lead author Chip Andrews writes "I wanted this book to give security and database professionals the same readability, reference ability, and red-eyed wonder that 'Hacking Exposed' gave me a few years back." My favorite aspect of the HE line was the material's ability to explain attack and defense concepts while illuminating the internal operation of victimized systems. SSS follows this lead by devoting entire chapters to SQL Server components, like Network-Libraries (ch. 4) and Authentication and Authorization (ch. 5). My favorite sections appear in chapter 7, where the authors describe novel ways to leverage SQL Server's "C-2 auditing" features for purposes of intrusion detection.br brSSS dispenses an immense amount of useful advice, whether it's a whole chapter on secure installation (ch. 3), best practices found in most chapters, or the appendices on stored procedures and integration with other Microsoft technologies. The only downside I found appears in chapter 2, where SQL samurai David Litchfield uses language outside the realm of most readers' understanding. For example, "the import address entry for GetProcAddress() in sqlsort.dll shifts by 12. With no SQL Server service pack, the address of the entry is at 0x42AE1010, and on SP1 and SP2, it is at 0x42AE101C" (p. 29). The uninitiated should skim this chapter and trust the authors when they claim SQL Server can be attacked by multiple means.br brSSS is a must-buy if you operate SQL Server. It's the manual Microsoft forgot to ship.
|
|
Our vBulletin book picks:
|
|
Find more vBulletin related products of interest.
|
