Securing SQL Server

5. Additional Security for an Internet Facing SQL Server and Application

Information in this chapter

•SQL CLR

•Extended Stored Procedures

•Protecting Your Connection Strings

•Database Firewalls

•Clear Virtual Memory Pagefile

•User Access Control (UAC)

•Other Domain Policies to Adjust

•Reporting Services

Chapter 5 builds on the techniques presented in Chapter 4. Where Chapter 4 shows how to generally secure the database instance, this chapter will show some additional measures that should be taken for database servers which are directly accessible from the Internet.

SQL CLR

When the SQL CLR was introduced in Microsoft SQL Server 2005, it was probably one of the most misunderstood and misused features of SQL Server. Part of this was due to the dual marketing ...