SQL Server 2016 Security and Compliance
SQL Server Security and Compliance
SQL 2016 new innovations
Ivan Kosyakov
Technical Architect, Ph.D.,
Microsoft Technology Center, New York
Always Encrypted
The need for Always Encrypted
Data disclosure
prevention
Queries on
encrypted data
Application
transparency
Client-side encryption of
sensitive data using keys that
are never given to the database
system
Support for equality
comparison, including join,
group by, and distinct operators
Minimal application changes via
server and client library
enhancements
Allows customers to securely store sensitive data outside of their trust boundary.
Data remains protected from high-privileged, yet unauthorized, users.
Security
How it works
Help protect data at rest and in motion, on-premises and in the cloud
Encrypted sensitive data and corresponding keys
are never seen in plaintext in SQL Server
Client
SQL Server or SQL Database
"SELECT Name FROM Customers
WHERE SSN =
@SSN",0x7ff654ae6d
"SELECT Name FROM Customers
WHERE SSN = @SSN","111-22-3333"
ciphertext
Result Set
ADO .NET
Name
Wayne Jefferson
Result Set
Name
0x19ca706fbd9a
dbo.Customers
trust boundary
Name
SSN
Country
0x19ca706fbd9a
0x7ff654ae6d
USA
ciphertext
Security
Types of encryption for Always Encrypted
Randomized encryption
Encrypt('123-45-6789') = 0x17cfd50a
Repeat: Encrypt('123-45-6789') = 0x9b1fcf32
Allows for transparent retrieval of encrypted
data but NO operations
More secure
Deterministic encryption
Encrypt('123-45-6789') = 0x85a55d3f
Repeat: Encrypt('123-45-6789') = 0x85a55d3f
Allows for transparent retrieval of encrypted
data AND equality comparison
E.g. in WHERE clauses and joins, distinct,
group by
Security
Two types of encryption
available
Randomized encryption uses a method that
encrypts data in a less predictable manner
Deterministic encryption uses a method that
always generates the same encrypted value for
any given plaintext value
................
................
In order to avoid copyright disputes, this page is only a partial summary.
To fulfill the demand for quickly locating and searching documents.
It is intelligent file search solution for home and business.
Related download
- external procedures triggers and user defined
- views stored procedures functions and triggers
- sql procedures triggers and user defined
- sql server standards illinois state board of education
- sql functions junagadh
- sql server 2016 security and compliance
- database programming with pl sql
- sql server ebook guru99
- database administration sql server
Related searches
- sql server 2016 string functions
- differences between server 2016 and 2019
- sql server 2016 installation steps
- sql server 2016 installation file
- sql server 2016 repair installation
- sql server 2016 setup
- office 365 security and compliance roles
- sql server 2016 install download
- sql server 2016 installation media
- microsoft security and compliance bundle
- sql server 2016 install media
- sql server 2016 installation