1. Module 13: Creating Highly Concurrent SQL Server 2012 Applications
Course 10776A
Module 13: Creating Highly Concurrent SQL Server 2012 Applications
Securing
SQL azure Database?
Boris Hristov
SQLSaturday #411 Cambridge

3. That’s not a marketing talk!
DISCLAIMER:
That’s not a marketing talk!

4. So who’s Boris?
@BorisHristov

5. Module 4: Managing Security
Course 2786B
Module 4: Managing Security
Session’s Timeline
coolness
Dynamic Data Masking
Row Level Security
time

6. Dynamic
Data Masking

7. “Have you ever…”

8. SELECT * FROM dbo.Customers
custid
FirstName
LastName
PhoneNumber
Address
CreditcardNumber 1
Boris
Hristov 2
Ivan
Donev 3
Stanislav
Zhelyaskov 4
Minchev

9. SELECT * FROM dbo.Customers
custid
FirstName
LastName
PhoneNumber
Address
CreditcardNumber 1
Boris
Hristov
xxxx-xxxx-xxxx-1111 2
Ivan
Donev
xxxx-xxxx-xxxx-2222 3
Stanislav
Zhelyaskov
xxxx-xxxx-xxxx-3333 4
Minchev
xxxx-xxxx-xxxx-4444

10. Dynamic
Data Masking

11. DEMO
Dynamic Data Masking

12. Row Level Security

13. “Have you ever…”

14. SELECT * FROM dbo.Orders
orderid
custid
orderdate
shipdate
shipcountry 1
4/20/ :15:49
Bulgaria 2
Germany 3 4 5

15. SELECT * FROM dbo.Orders
orderid
custid
orderdate
shipdate
shipcountry 1
4/20/ :15:49
Bulgaria 4 2 5 3

16. How is that possible?

17. No GUI, folks  -- user defined function
CREATE FUNCTION Security.fn_securitypredicate
AS sysname)
RETURNS TABLE
WITH SCHEMABINDING AS
RETURN SELECT 1 AS fn_securitypredicate_result
= USER_NAME()
OR USER_NAME() = 'Manager';
-- security policy
CREATE SECURITY POLICY SalesFilter
ADD FILTER PREDICATE Security.fn_securitypredicate(SalesRep)
ON dbo.Sales WITH (STATE = ON);

18. DEMO
Row Level Security

19. Cool, huh?

20. Not that fast…

21. Module 4: Managing Security
Course 2786B
Module 4: Managing Security
Session’s Timeline
coolness
Dynamic Data Masking
Row Level Security
time

22. DEMO
Row Level Security Issues

23. So is that a security feature then?

24. Or is that a programmability feature?

25. Take away(s) RLS is great. Just be aware of the current issues!
Easily mask sensitive data with Dynamic Data Masking
A lot’s going on in SQL Azure DB…

26. Stick around for SWAG! (Prize drawing at 5.00 p.m)
All our volunteers and organisers do not get paid for running SPS SQLSaturday Cambridge and do it because they believe in the power of community (or are just plain nuts). Please show your gratitude for making this possible by:
Giving them a hug
Shaking their hand
Saying thank you
Coming back next year
Consider getting your company to pay for a precon next year
Speading the word
Getting involved yourself
But most of all, by enjoying the day!
Don’t forget to thank the sponsors for their support
Thank the speakers for donating their time, energy and expenses

27. Stick around for SWAG! (Prize drawing at 5.00 p.m)
SQLCloud — XBox One!!! (make sure you know how to play the Jet Set Willy vendor competition!)
SQLCloud—Dark Side Of The Moon, The Wall and Wish You Were Here
Microsoft — MCP Voucher
Data Idols — Supercar Driving Experience
Profisee — Signed MDS Book and £50 Amazon Voucher
SQLSentry — Plan Explorer PRO License
Pyramid Analytics—Coffee Machine
Effektor — Lego Big Ben
Rencore — SPCAF Professional License (valued at $2099!)
Axioworks — Amazon Fire TV and £75 Amazon Voucher
DELL — Beats by Dr Dre Headphones
Redgate — DLM Workshop
Pluralsight — Annual Plus subscriptions
All Your Base Conference — 3 x Conference Tickets
VisualSP—Annual training subscription
Loads of books and much much more!!!

28. Module 13: Creating Highly Concurrent SQL Server 2012 Applications
Course 10776A
Module 13: Creating Highly Concurrent SQL Server 2012 Applications
Thank you!
Contacts:
@BorisHristov