Security is not a feature
summary
Demonstrates Dynamic Data Masking, Row Level Security and Always Encrypted against a Northwind demo: masks a phone column, limits rows so Andrew sees 648 rows and Janet 127, and encrypts an address column that only decrypts when a client certificate is present and the connection string enables column encryption. Recreates masking with views/CASE and row filtering on SQL Server 2000 and implements application‑side encryption there; the reimplementations work but require code or view changes and client key management.
AI-written summary · about
chapters (10)
- 0:00Start
- 0:22Let me introduce myself
- 1:56A thing or two about security
- 8:18Some security features you might use
- 8:48Dynamic Data masking
- 9:49Row Level Security
- 12:26Always Encrypted
- 15:11Put it to action
- 41:51Will it run on SQL 2000?
- 46:25Final thoughts
related talks
32mAnonymization and Dynamic Masking with PostgreSQL
48mGetting To Know SQL Server Encryption Capabilities
48mProtecting the confidentiality and integrity of your high value data with Azure SQL and SQL Server 2
48mColumn encryption solutions and ideas
47mData at Rest Encryption Going Beyond the Basics to Address Modern Attacks
51mWhere should I be encrypting my data
12mStriking the Balance: Safeguarding Customer Privacy While Empowering Employees
43mConfidential development with Always Encrypted using enclaves