Q

Offer SQL Server security services

Choose which SQL Server security services to offer your customers. Our DBA site expert outlines your options.

What database security services should I offer my SQL Server customers and how often should I test them for security flaws?

VARs can offer database clients two classes of security services:

  • Monitoring services
  • Best practices analysis

Important monitoring services include the following:

  1. Intrusion detection -- SQL Injection or buffer overflow attacks like SQL Slammer.
  2. Unauthorized object access as part of the larger umbrella of Sarbanes Oxley compliance.
  3. Destructive DDL commands -- drop table statements.
  4. Account rights escalation – guest role account enabling, or adding a low privileged user account to the sysadmin role.

As new exploits are discovered, continuous threat analysis is an important service for a VAR to offer.

Best practices analysis can include the following:

  1. Checks for weak or no passwords.
  2. Scans to ensure that all accounts are running under the least privileges.
  3. Locking down of xp_cmdshell and other features which may expose your SQL Servers to exploits.
  4. Limiting use of the guest account and the sysadmin role.
This was first published in July 2007
This Content Component encountered an error

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

MicroscopeUK

SearchCloudProvider

SearchSecurity

SearchStorage

SearchNetworking

SearchCloudComputing

SearchConsumerization

SearchDataManagement

SearchBusinessAnalytics

Close