{"id":603,"date":"2010-04-19T14:13:00","date_gmt":"2010-04-19T14:13:00","guid":{"rendered":"\/blogs\/bobb\/post\/SQL-Server-security-precon-at-TechEd-2010.aspx"},"modified":"2014-01-20T12:19:15","modified_gmt":"2014-01-20T20:19:15","slug":"sql-server-security-precon-at-teched-2010","status":"publish","type":"post","link":"https:\/\/www.sqlskills.com\/blogs\/bobb\/sql-server-security-precon-at-teched-2010\/","title":{"rendered":"SQL Server security precon at TechEd 2010."},"content":{"rendered":"<p>\nThis blog posting is meant to bring attention to the fact that I&#39;m doing a preconference talk, &quot;A Day of SQL Server Security&quot; at TechEd 2010 in New Orleans in June. OK, the TechEd folks asked me to publicize it. I&#39;m also doing two breakout sessions, one on &quot;Entity Framework and LINQ2SQL vs. Stored Procedures&quot;, and the other on &quot;Integrating Microsoft SQL Server Event Tracing with OS-Level Events and Database Client Events&quot;.\n<\/p>\n<p>\nAlthough I&#39;ve done individual topics of SQL Server Security before (e.g. Auditing, at TechEd Europe 2009) you might be saying to yourself, &quot;this Beauchemin guy is known for database development, what&#39;s his background in security anyhow?&quot;. Well, I did write the &quot;<a href=\"http:\/\/download.microsoft.com\/download\/8\/5\/e\/85eea4fa-b3bb-4426-97d0-7f7151b2011c\/SQL2005SecBestPract.doc\">SQL Server Security Best Practices Whitepaper<\/a>&quot; for SQL Server 2005. But there&#39;s a better story.\n<\/p>\n<p>\nIn 1992, I made my one-and-only foray into the world of startup companies, when I joined (as employee #2) a company called Open Computing Security Group (<a href=\"http:\/\/www.faqs.org\/faqs\/kerberos-faq\/user\/\">OCSG<\/a>). This company eventually grew and changed its name to <a href=\"http:\/\/cybersafe.com\/\">CyberSafe<\/a>, and it&#39;s still around today. At &quot;the beginning&quot; we concentrated on Kerberos software, releasing commercial versions of Kerberos for 5-6 Unix variants and Kerberos clients for Windows (3.1) and Mac. This included SDKs, like the <a href=\"http:\/\/msdn.microsoft.com\/en-us\/library\/ms995352.aspx\">GSSAPI<\/a>, and clients like klogin\/klogind. My first Kerberos port was targeted at the NeXT computer.\n<\/p>\n<p>\nThe new company was going strong and, in addition to the products, we did security audits and taught classes on Kerberos protocol and implementation. The very first class I ever taught was on Kerberos; students seemed to like it, although I immediately went back to being &quot;that geek in the corner who wrote code, and spoke to no one&quot;. \ud83d\ude09 Other classes came along post-OCSG.\n<\/p>\n<p>\nWhen Kerberos R5 was released, I was asked to brainstorm a list of products where Kerberos could be integrated. I came up with about 25 ideas (probably not new ideas, but they were new to me) including using Kerberos for database authentication\/authorization and using a database as a repository for the KDC. Eventually, I split with the company as it grew.\n<\/p>\n<p>\nI&#39;ve always had a fondness for computer security ever since. And I&#39;ve been implementing, studying, and teaching anything to do with SQL Server security. Hence, the preconference talk. Be you DBA, developer, architect, or anything in between, I think it will be worth your while.\n<\/p>\n<p>\n&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This blog posting is meant to bring attention to the fact that I&#39;m doing a preconference talk, &quot;A Day of SQL Server Security&quot; at TechEd 2010 in New Orleans in June. OK, the TechEd folks asked me to publicize it. I&#39;m also doing two breakout sessions, one on &quot;Entity Framework and LINQ2SQL vs. Stored Procedures&quot;, [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[23],"tags":[],"class_list":["post-603","post","type-post","status-publish","format-standard","hentry","category-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.9.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>SQL Server security precon at TechEd 2010. - Bob Beauchemin<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.sqlskills.com\/blogs\/bobb\/sql-server-security-precon-at-teched-2010\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SQL Server security precon at TechEd 2010. - Bob Beauchemin\" \/>\n<meta property=\"og:description\" content=\"This blog posting is meant to bring attention to the fact that I&#039;m doing a preconference talk, &quot;A Day of SQL Server Security&quot; at TechEd 2010 in New Orleans in June. OK, the TechEd folks asked me to publicize it. I&#039;m also doing two breakout sessions, one on &quot;Entity Framework and LINQ2SQL vs. Stored Procedures&quot;, [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.sqlskills.com\/blogs\/bobb\/sql-server-security-precon-at-teched-2010\/\" \/>\n<meta property=\"og:site_name\" content=\"Bob Beauchemin\" \/>\n<meta property=\"article:published_time\" content=\"2010-04-19T14:13:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2014-01-20T20:19:15+00:00\" \/>\n<meta name=\"author\" content=\"Bob Beauchemin\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Bob Beauchemin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/sql-server-security-precon-at-teched-2010\/\",\"url\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/sql-server-security-precon-at-teched-2010\/\",\"name\":\"SQL Server security precon at TechEd 2010. - Bob Beauchemin\",\"isPartOf\":{\"@id\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/#website\"},\"datePublished\":\"2010-04-19T14:13:00+00:00\",\"dateModified\":\"2014-01-20T20:19:15+00:00\",\"author\":{\"@id\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/#\/schema\/person\/62bfa986c5b5d28fcffd8b4fc409c73e\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/sql-server-security-precon-at-teched-2010\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.sqlskills.com\/blogs\/bobb\/sql-server-security-precon-at-teched-2010\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/sql-server-security-precon-at-teched-2010\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security\",\"item\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/category\/security\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"SQL Server security precon at TechEd 2010.\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/#website\",\"url\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/\",\"name\":\"Bob Beauchemin\",\"description\":\"SQL Server Blog\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/#\/schema\/person\/62bfa986c5b5d28fcffd8b4fc409c73e\",\"name\":\"Bob Beauchemin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/6f80e6cc667410857fa6a21931dc528b8092f4d112bf7a8ff7c267674d44ee37?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/6f80e6cc667410857fa6a21931dc528b8092f4d112bf7a8ff7c267674d44ee37?s=96&d=mm&r=g\",\"caption\":\"Bob Beauchemin\"},\"sameAs\":[\"http:\/www.sqlskills.com\/blogs\/bobb\/\"],\"url\":\"https:\/\/www.sqlskills.com\/blogs\/bobb\/author\/bobb\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SQL Server security precon at TechEd 2010. - Bob Beauchemin","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.sqlskills.com\/blogs\/bobb\/sql-server-security-precon-at-teched-2010\/","og_locale":"en_US","og_type":"article","og_title":"SQL Server security precon at TechEd 2010. - Bob Beauchemin","og_description":"This blog posting is meant to bring attention to the fact that I&#39;m doing a preconference talk, &quot;A Day of SQL Server Security&quot; at TechEd 2010 in New Orleans in June. OK, the TechEd folks asked me to publicize it. I&#39;m also doing two breakout sessions, one on &quot;Entity Framework and LINQ2SQL vs. Stored Procedures&quot;, [&hellip;]","og_url":"https:\/\/www.sqlskills.com\/blogs\/bobb\/sql-server-security-precon-at-teched-2010\/","og_site_name":"Bob Beauchemin","article_published_time":"2010-04-19T14:13:00+00:00","article_modified_time":"2014-01-20T20:19:15+00:00","author":"Bob Beauchemin","twitter_misc":{"Written by":"Bob Beauchemin","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.sqlskills.com\/blogs\/bobb\/sql-server-security-precon-at-teched-2010\/","url":"https:\/\/www.sqlskills.com\/blogs\/bobb\/sql-server-security-precon-at-teched-2010\/","name":"SQL Server security precon at TechEd 2010. - Bob Beauchemin","isPartOf":{"@id":"https:\/\/www.sqlskills.com\/blogs\/bobb\/#website"},"datePublished":"2010-04-19T14:13:00+00:00","dateModified":"2014-01-20T20:19:15+00:00","author":{"@id":"https:\/\/www.sqlskills.com\/blogs\/bobb\/#\/schema\/person\/62bfa986c5b5d28fcffd8b4fc409c73e"},"breadcrumb":{"@id":"https:\/\/www.sqlskills.com\/blogs\/bobb\/sql-server-security-precon-at-teched-2010\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.sqlskills.com\/blogs\/bobb\/sql-server-security-precon-at-teched-2010\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.sqlskills.com\/blogs\/bobb\/sql-server-security-precon-at-teched-2010\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.sqlskills.com\/blogs\/bobb\/"},{"@type":"ListItem","position":2,"name":"Security","item":"https:\/\/www.sqlskills.com\/blogs\/bobb\/category\/security\/"},{"@type":"ListItem","position":3,"name":"SQL Server security precon at TechEd 2010."}]},{"@type":"WebSite","@id":"https:\/\/www.sqlskills.com\/blogs\/bobb\/#website","url":"https:\/\/www.sqlskills.com\/blogs\/bobb\/","name":"Bob Beauchemin","description":"SQL Server Blog","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.sqlskills.com\/blogs\/bobb\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.sqlskills.com\/blogs\/bobb\/#\/schema\/person\/62bfa986c5b5d28fcffd8b4fc409c73e","name":"Bob Beauchemin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.sqlskills.com\/blogs\/bobb\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/6f80e6cc667410857fa6a21931dc528b8092f4d112bf7a8ff7c267674d44ee37?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6f80e6cc667410857fa6a21931dc528b8092f4d112bf7a8ff7c267674d44ee37?s=96&d=mm&r=g","caption":"Bob Beauchemin"},"sameAs":["http:\/www.sqlskills.com\/blogs\/bobb\/"],"url":"https:\/\/www.sqlskills.com\/blogs\/bobb\/author\/bobb\/"}]}},"_links":{"self":[{"href":"https:\/\/www.sqlskills.com\/blogs\/bobb\/wp-json\/wp\/v2\/posts\/603","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sqlskills.com\/blogs\/bobb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sqlskills.com\/blogs\/bobb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sqlskills.com\/blogs\/bobb\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sqlskills.com\/blogs\/bobb\/wp-json\/wp\/v2\/comments?post=603"}],"version-history":[{"count":0,"href":"https:\/\/www.sqlskills.com\/blogs\/bobb\/wp-json\/wp\/v2\/posts\/603\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.sqlskills.com\/blogs\/bobb\/wp-json\/wp\/v2\/media?parent=603"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sqlskills.com\/blogs\/bobb\/wp-json\/wp\/v2\/categories?post=603"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sqlskills.com\/blogs\/bobb\/wp-json\/wp\/v2\/tags?post=603"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}