Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Back to my personal blog
I am no longer part of the SQL Server team, but I still have a lot of passion for security and SQL...
Date: 12/05/2011
SQL Server Security team is starting a new blog
First of all, I am really sorry for not writing anything for quite a long time. The SQL Server...
Date: 11/29/2007
Link to MSDN forum discussion: "Yet another question on Application security.... "
I am adding a link to one of the MSDN SQL Server Security forum discussion regarding application...
Date: 07/13/2007
Dynamic SQL and digital signatures in SQL Server 2005
As I already mentioned, dynamic SQL is a quite powerful, but also quite dangerous. In SQL Server...
Date: 05/09/2007
After a long delay, I am ready to start posting again
I know it has been quite some time since I added any new content, I sincerely apologize for that,...
Date: 05/09/2007
Dynamic SQL & SQL injection
I know there are a lot of papers that talk about dynamic SQL in more depth than what I am going to...
Date: 01/04/2007
Let's talk about Dynamic SQL (preamble)
I want to talk about how dynamic SQL is affected by the execution context, but as this is a huge and...
Date: 01/04/2007
Using a digital signature as a secondary identity to replace Cross database ownership chaining
In SQL Server 2000, Cross database ownership chaining (CDOC) was a mechanism used to allow access...
Date: 10/30/2006
Quick guide to DB users without logins in SQL Server 2005
SQL Server 2005 introduced a new SQL DB principal subtype that can be quite useful: a SQL user that...
Date: 07/03/2006
How to distribute digitally signed SQL modules
Digital signatures in SQL Server 2005 modules can be used to extend the privileges of the caller for...
Date: 05/29/2006
SQL Server 2005 –Encrypting data on existing applications
SQL Server 2005 encryption requires the application to be aware of it and to decrypt the data before...
Date: 05/04/2006
Link to Laurentiu's blog
I am including a link to Laurentiu Cristofor's blog: https://blogs.msdn.com/lcris. Laurentiu is one...
Date: 05/04/2006
Indexing encrypted data
Encrypted data and indexes One thing I have been asked many times is how to create an index on top...
Date: 03/12/2006