Kurs for utviklere

Juli 2017: Microsoft kårer nok en gang Glasspaper til
Årets kurspartner. Det er åttende år på rad at
Glasspaper mottar denne hedersprisen!


Hacking and Securing SQL Server

Kursavgift: kr 25 000 | Varighet: 5 dager

Beskrivelse:

In this workshop you will analyze, learn and practice critical tasks for implementing highly secure SQL Server infrastructure. We’ll start with identifying security needs regarding database servers and look at the most common attack types and use them on ‘out of the box’ installation. In simple words we will hack our systems!

Then we will discuss impact of system and network security on databases server. Next we will go through every layer of protection offered by SQL Server with lots of real life examples and hands on labs. At the end we will look at the monitoring and auditing our infrastructure to detect threats and react to them. Additionally we’ll play with security of other SQL Services and Azure SQL Databases. Our goal is to show and teach you how to protect your precious data in SQL Server environment and how database security mechanisms work. After the course you will be able to test and secure your SQL Server infrastructure. And to get more practice we offer three extra weeks of labs online!

We want you to leave the class with scripts, checklists and practical, ready-to-use knowledge of how to hack, test and secure your SQL Server infrastructure.

This course is a must-go for database administrators, IT professionals and security officers dealing with database servers. Delivered by hilly skilled SQL and database enthusiast with practical knowledge, multiple successful projects, many years of real-world experience and great teaching skills. The course has a form of intense workshop where we make a deep dive inside the SQL Server. All exercises are based on SQL Server 2016 and Windows Server 2016.

Målgruppe:

Database administrators, infrastructure architects, security professionals, system engineers, advanced database developer, IT professionals, security consultants and other people responsible for implementing databases security.


Forkunnskaper:

To attend this training you should have good hands-on experience in administering Microsoft SQL Server infrastructure. At least 5 years in the field is recommended.


Innhold:

Agenda


Module 1 Hacking SQL Server Infrastructure
    a) Discovering SQL Server instances
    b) SQL injection using men in the middle
    c) Capturing SQL credentials using men in the middle
    d) Decrypting SQL Logins passwords
    e) Gaining access to SQL Server on compromised Windows Server
Module 2: SQL Server security baseline concepts
    a) Defining security objectives
    b) Configuring service accounts
    c) Auditing database permissions
    d) Implementing physical protection
    e) Configuring firewall
    f) Securing client-server communication
Module 3: SQL Server Instance security
    a) Limiting permissions
    b) Securing CLR
    c) Implementing protection for extended procedures
    d) Protecting linked servers (OPENROWSET)
    e) Securing by using policies
    f) Hiding instance metadata
Module 4: Managing Logins and Passwords
    a) Authentication options
    b) Implementing password policies
    c) Securing connection strings
    Customizing login / user authorization
Module 5: Encryption in SQL Server
    a) Key management
    b) Code and data encryption
    c) Managing certificates
    d) Transparent database encryption
    e) Encryption in HA and Disaster Recovery
Module 6: Protecting database backups
    a) Securing backup files
    b) Setting backup file passwords and encryption
    c) Handling keys and certificate backups
    d) Security considerations while restoring to another SQL Server instance
Module 7: Monitoring and auditing
    a) Login auditing options
    b) Data access auditing
    c) Data Manipulation Language custom auditing
    d) Policy-based management
    e) Forensics case study
Module 8: Securing other SQL Server services
    a) SQL Server Agent
    b) SQL Server Analysis Services
    c) SQL Server Reporting Services
    d) Azure SQL Database


Materials


Authors unique tools and scripts, over 100 pages of exercises, presentations slides with notes.






Epost mottat


Du er nå meldt på nyhetsbrevlisten

Epost mottat


Du er nå meldt på nyhetsbrevlisten

Bestill kurset her

arrow

Velg kurssted

    arrow

    Velg dato



    kurs merket med * har startgaranti

    arrow

    Mailen er sendt:

    Ditt tips er registrert og sendt!
    Vi håper snarlig å se deg på kurs hos oss!

    Feilmelding:

    OBS! Vi har problemer med å sende ditt tips!

    Vi anbefaler deg å sjekke om du har skrevet inn en gyldig mailadresse.

    Tips sjefen

    Lyst til å delta på dette kurset, men må overbevise sjefen først?

    Glasspaper har laget en tips funksjon, som gjør det enklere for deg å overbevise din sjef om at dette kurset er perfekt for deg.
    Det eneste du trenger å gjøre er å fylle ut kontaktinformasjon, så sender vi relevant informasjon om kurset rett til dine utvalgte kontaktpersoner.
    Bruk gjerne funksjonen til å tipse venner og kollegaer om at dette er et nyttig kurs for dem





    Kontakt oss

    Kursansvarlig

    Hroar Henriksen

    916 70 066

    Hroar.Henriksen@glasspaper.no


    Glasspaper er kåret til Årets Microsoft Kurspartner 2017 - dette er åttende år på rad vi mottar denne hedersprisen