<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>
<channel>
	<title>SQL Server Performance &#187; Security</title>
	<atom:link href="http://www.sql-server-performance.com/tag/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.sql-server-performance.com</link>
	<description>SQL Server Performance Tuning</description>
	<lastBuildDate>Tue, 18 Jun 2013 05:40:59 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
		<item>
		<title>Avoiding Parameter Sniffing in SQL Server</title>
		<link>http://www.sql-server-performance.com/2013/avoiding-parameter-sniffing-in-sql-server/</link>
		<comments>http://www.sql-server-performance.com/2013/avoiding-parameter-sniffing-in-sql-server/#comments</comments>
		<pubDate>Tue, 11 Jun 2013 06:21:34 +0000</pubDate>
		<dc:creator>Dinesh Asanka</dc:creator>
				<category><![CDATA[General DBA]]></category>
		<category><![CDATA[Performance Tuning]]></category>
		<category><![CDATA[parameter sniffing]]></category>
		<category><![CDATA[Security]]></category>
		<guid isPermaLink="false">http://www.sql-server-performance.com/?p=3672</guid>
		<description><![CDATA[Parameter sniffing is when SQL Server compiles a stored procedure&#8217;s execution plan with the first parameter that has been used and then uses this plan for subsequent executions regardless of the parameters. First let&#8217;s look at a worked example. Assume we have table as below. CREATE Table TblData (ID INT IDENTITY PRIMARY KEY , Name [...]]]></description>
		<wfw:commentRss>http://www.sql-server-performance.com/2013/avoiding-parameter-sniffing-in-sql-server/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>ASP.NET MVC Security &#8211; Guarding Against Mass Assignment Vulnerability</title>
		<link>http://www.sql-server-performance.com/2012/asp-net-mvc-security-guarding-against-mass-assignment-vulnerability/</link>
		<comments>http://www.sql-server-performance.com/2012/asp-net-mvc-security-guarding-against-mass-assignment-vulnerability/#comments</comments>
		<pubDate>Mon, 05 Nov 2012 05:46:02 +0000</pubDate>
		<dc:creator>Jude O'Kelly</dc:creator>
				<category><![CDATA[Developer]]></category>
		<category><![CDATA[ASP.NET MVC]]></category>
		<category><![CDATA[Security]]></category>
		<guid isPermaLink="false">http://www.sql-server-performance.com/?p=3304</guid>
		<description><![CDATA[In my previous article on Parameter Tampering in ASP.NET MVC I focused on the general techniques of parameter tampering and defenses against it. In this article I will examine a specific type of parameter tampering which is often termed Mass Assignment. In most MVC web development frameworks (including ASP.NET MVC). Model binding works by assigning [...]]]></description>
		<wfw:commentRss>http://www.sql-server-performance.com/2012/asp-net-mvc-security-guarding-against-mass-assignment-vulnerability/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Protecting Against SQL Injection</title>
		<link>http://www.sql-server-performance.com/2012/protecting-against-sql-injection/</link>
		<comments>http://www.sql-server-performance.com/2012/protecting-against-sql-injection/#comments</comments>
		<pubDate>Thu, 04 Oct 2012 07:14:54 +0000</pubDate>
		<dc:creator>Jude O'Kelly</dc:creator>
				<category><![CDATA[Developer]]></category>
		<category><![CDATA[General DBA]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[SQL Injection]]></category>
		<guid isPermaLink="false">http://www.sql-server-performance.com/?p=3262</guid>
		<description><![CDATA[Despite being so well understood, SQL Injection remains one of the most common vulnerabilities in web applications. What is SQL Injection Any SQL which is dynamically created has the potential for having malicious SQL injected into it. For example, the below code receives a querystring and adds it to a SQL select string which will [...]]]></description>
		<wfw:commentRss>http://www.sql-server-performance.com/2012/protecting-against-sql-injection/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Protect Your ASP.NET App From SQL Parameter Injection</title>
		<link>http://www.aspnet101.com/2010/10/protect-your-asp-net-app-from-sql-parameter-injection/</link>
		<comments>http://www.aspnet101.com/2010/10/protect-your-asp-net-app-from-sql-parameter-injection/#comments</comments>
		<pubDate>Thu, 13 Jan 2011 01:12:50 +0000</pubDate>
		<dc:creator>J OKelly</dc:creator>
				<category><![CDATA[Windows Server]]></category>
		<category><![CDATA[NET]]></category>
		<category><![CDATA[Parameter Injection]]></category>
		<category><![CDATA[Security]]></category>
		<guid isPermaLink="false">http://www.sql-server-performance.com/?=1921</guid>
		<description><![CDATA[Securing your ASP.NET web app from SQL Injection attacks paramount in the design of any ASP.NET app]]></description>
		<wfw:commentRss>http://www.aspnet101.com/2010/10/protect-your-asp-net-app-from-sql-parameter-injection/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Understanding SQL Server 2008 R2 Fixed Database Level Roles</title>
		<link>http://www.sql-server-performance.com/2011/2008-r2-fixed-database-level-roles/</link>
		<comments>http://www.sql-server-performance.com/2011/2008-r2-fixed-database-level-roles/#comments</comments>
		<pubDate>Tue, 11 Jan 2011 01:12:50 +0000</pubDate>
		<dc:creator>satnam singh</dc:creator>
				<category><![CDATA[General DBA]]></category>
		<category><![CDATA[2008 R2]]></category>
		<category><![CDATA[database roles]]></category>
		<category><![CDATA[Fixed Database Level Roles]]></category>
		<category><![CDATA[level]]></category>
		<category><![CDATA[Roles]]></category>
		<category><![CDATA[Security]]></category>
		<guid isPermaLink="false">http://www.sql-server-performance.com/?=1924</guid>
		<description><![CDATA[To easily manage the permissions in our databases, Microsoft has provided several roles in SQL Server which are security principals that group other principals. They are like groups in the Microsoft Windows operating system. Database-level roles are database-wide in their permissions scope. The various types of SQL Server fixed database roles are as follows: &#183; [...]]]></description>
		<wfw:commentRss>http://www.sql-server-performance.com/2011/2008-r2-fixed-database-level-roles/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Pro SQL Server Disaster Recovery</title>
		<link>http://www.sql-server-performance.com/2010/pro-sql-server-disaster-recovery/</link>
		<comments>http://www.sql-server-performance.com/2010/pro-sql-server-disaster-recovery/#comments</comments>
		<pubDate>Thu, 02 Sep 2010 01:12:50 +0000</pubDate>
		<dc:creator>Frank Kalis</dc:creator>
				<category><![CDATA[Books]]></category>
		<category><![CDATA[Disaster Recovery]]></category>
		<category><![CDATA[Security]]></category>
		<guid isPermaLink="false">http://www.sql-server-performance.com/?=1896</guid>
		<description><![CDATA[Database server can (and will) fail just like any other electronic device. Therefore it would be grossly negligent not to plan ahead how to deal with such a situation. How the resulting plan looks like, differs on a case by case basis, but at a bare minimum should the databases that are hosted on the [...]]]></description>
		<wfw:commentRss>http://www.sql-server-performance.com/2010/pro-sql-server-disaster-recovery/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>SQL Server Security Audit (Part 3) &#8211; Operating System Level Audit</title>
		<link>http://www.sql-server-performance.com/2009/security-audit-operating-system/</link>
		<comments>http://www.sql-server-performance.com/2009/security-audit-operating-system/#comments</comments>
		<pubDate>Mon, 24 Aug 2009 01:12:50 +0000</pubDate>
		<dc:creator>Sadequl Hussain</dc:creator>
				<category><![CDATA[Audit]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Security Audit]]></category>
		<guid isPermaLink="false">http://www.sql-server-performance.com/?=1722</guid>
		<description><![CDATA[Operating system level audits Typically, most DBAs have remote access privilege to the Windows machine hosting the database server. If you have administrator privilege in the Windows box (or VM), you can take some time to try the following: Windows security log This should be actually a part of the DBA’s daily checks. However, as [...]]]></description>
		<wfw:commentRss>http://www.sql-server-performance.com/2009/security-audit-operating-system/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>SQL Server Security Audit (Part 1) &#8211; Server Level Audit</title>
		<link>http://www.sql-server-performance.com/2009/security-audit-server-level/</link>
		<comments>http://www.sql-server-performance.com/2009/security-audit-server-level/#comments</comments>
		<pubDate>Mon, 10 Aug 2009 01:12:50 +0000</pubDate>
		<dc:creator>Sadequl Hussain</dc:creator>
				<category><![CDATA[Audit]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Security Audit]]></category>
		<guid isPermaLink="false">http://www.sql-server-performance.com/?=1717</guid>
		<description><![CDATA[Although security is a major component of database administration, it is sometimes overlooked in favour of convenience. User accounts are given elevated permissions to save time, patches and hot-fixes are not applied timely and best practices are often not followed. Over time, the server becomes vulnerable to potential breaches of security. As the DBA, you [...]]]></description>
		<wfw:commentRss>http://www.sql-server-performance.com/2009/security-audit-server-level/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>SQL Server Audit Articles (All)</title>
		<link>http://www.sql-server-performance.com/2005/sql-server-audit-articles-all/</link>
		<comments>http://www.sql-server-performance.com/2005/sql-server-audit-articles-all/#comments</comments>
		<pubDate>Mon, 28 Mar 2005 04:02:40 +0000</pubDate>
		<dc:creator>SSPAdmin</dc:creator>
				<category><![CDATA[Misc]]></category>
		<category><![CDATA[audit feature]]></category>
		<category><![CDATA[lightweight solution]]></category>
		<category><![CDATA[operating system configuration]]></category>
		<category><![CDATA[Security]]></category>
		<guid isPermaLink="false">http://www.sql-server-performance.com/?p=2000</guid>
		<description><![CDATA[Auditing with Microsoft Assessment and Planning (MAP) Toolkit 5.0 &#8211; Part 3 Auditing with Microsoft Assessment and Planning (MAP) Toolkit 5.0 &#8211; Part 2 Auditing with Microsoft Assessment and Planning (MAP) Toolkit 5.0 &#8211; Part 1 Retrieving Data from an Audit Table Auditing in SQL Server 2008 SQL Server Security Audit (Part 3) &#8211; Operating [...]]]></description>
		<wfw:commentRss>http://www.sql-server-performance.com/2005/sql-server-audit-articles-all/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
