1. Boris Hristov, SQL Server MVP
Securing SQL Azure DB?
Boris Hristov, SQL Server MVP

2. Organizer
SQLSaturday Rheinland 2015

3. Bronze Sponsor
SQLSaturday Rheinland 2015

4. Silver Sponsor
SQLSaturday Rheinland 2015

5. Gold Sponsor
SQLSaturday Rheinland 2015

6. You rock!
SQLSaturday Rheinland 2015

7. That’s not a marketing talk!
DISCLAIMER:
That’s not a marketing talk!

8. So who is this guy Boris?
@BorisHristov

9. Session’s Timeline coolness Dynamic Data Masking Row Level Security

10. Dynamic
Data Masking

11. “Have you ever…”

12. SELECT * FROM dbo.Customers
custid
FirstName
LastName
PhoneNumber
Address
CreditcardNumber 1
Boris
Hristov 2
Ivan
Donev 3
Stanislav
Zhelyaskov 4
Minchev

13. SELECT * FROM dbo.Customers
custid
FirstName
LastName
PhoneNumber
Address
CreditcardNumber 1
Boris
Hristov
xxxx-xxxx-xxxx-1111 2
Ivan
Donev
xxxx-xxxx-xxxx-2222 3
Stanislav
Zhelyaskov
xxxx-xxxx-xxxx-3333 4
Minchev
xxxx-xxxx-xxxx-4444

14. Dynamic
Data Masking

15. DEMO
Dynamic Data Masking

16. Row Level Security

17. “Have you ever…”

18. SELECT * FROM dbo.Orders
orderid
custid
orderdate
shipdate
shipcountry 1
4/20/ :15:49
Bulgaria 2
Germany 3 4 5

19. SELECT * FROM dbo.Orders
orderid
custid
orderdate
shipdate
shipcountry 1
4/20/ :15:49
Bulgaria 4 2 5 3

20. How is that possible?

21. No GUI, folks  -- user defined function
CREATE FUNCTION Security.fn_securitypredicate
AS sysname)
RETURNS TABLE
WITH SCHEMABINDING AS
RETURN SELECT 1 AS fn_securitypredicate_result
= USER_NAME()
OR USER_NAME() = 'Manager';
-- security policy
CREATE SECURITY POLICY SalesFilter
ADD FILTER PREDICATE Security.fn_securitypredicate(SalesRep)
ON dbo.Sales WITH (STATE = ON);

22. DEMO
Row Level Security

23. Cool, huh?

24. Not that fast…

25. Session’s Timeline coolness Dynamic Data Masking Row Level Security

26. DEMO
Row Level Security Issues

27. So is that a security feature then?

28. Or is that a programmability feature?

29. Summary There’s a lot going on in SQL Azure DB
Easily mask sensitive data with Dynamic Data Masking
Limit the rows users can see with Row Level Security
Be aware of the current issues of RLS

30. Save the date!
SQLSaturday Rheinland 2015

31. Thank you! Contacts: brshristov@live.com www.borishristov.com