Vis finduddannelse.dk som: Mobile

Masterclass: Hacking and Securing SQL Server

Teknologisk Institut
Startdatoer
Taastrup
09-03-2020  
24.499 DKK
11-05-2020  
24.499 DKK

Kursusbeskrivelse

Vi starter med at identificere sikerhedsbehov vedrørende databaseservere og kigger på de mest almindelige angrebstyper og bruge dem på 'out of the box' installationen. På kurset analysere, lærer og praktiserer du kritiske opgaver til implementering på et highly secure SQL Server infrastruktur. Meget enkelt, vi vil hacke vores egne systemer! Undervisningen foregår på engelsk.

This course is a must-go for database administrators, IT professionals and security officers dealing with database servers.

Then we will discuss impact of system and network security on databases server. Next we will go through every layer of protection offered by SQL Server with lots of real life examples and hands on labs. At the end we will look at the monitoring and auditing our infrastructure to detect threats and react to them. Additionally we’ll play with security of other SQL Services and Azure SQL Databases. Our goal is to show and teach you how to protect your precious data in SQL Server environment and how database security mechanisms work.

Forudsætninger

To attend this training you should have good hands-on experience in administering Microsoft SQL Server infrastructure. At least 5 years in the field is recommended.

Deltagerprofil

Database administrators, infrastructure architects, security professionals, system engineers, advanced database developer, IT professionals, security consultants and other people responsible for implementing databases security.

Udbytte

After the course you will be able to test and secure your SQL Server infrastructure. And to get more practice we offer three extra weeks of labs online! We want you to leave the class with scripts, checklists and practical, ready-to-use knowledge of how to hack, test and secure your SQL Server infrastructure.

Indhold

Module 1 Hacking SQL Server Infrastructure
  • Discovering SQL Server instances
  • SQL injection using men in the middle
  • Capturing SQL credentials using men in the middle
  • Decrypting SQL Logins passwords
  • Gaining access to SQL Server on compromised
  • Windows Server
Module 2: SQL Server security baseline concepts
  • Defining security objectives
  • Configuring service accounts
  • Auditing database permissions
  • Implementing physical protection
  • Configuring firewall
  • Securing client-server communication
Module 3: SQL Server Instance security
  • Limiting permissions
  • Securing CLR
  • Implementing protection for extended procedures
  • Protecting linked servers (OPENROWSET)
  • Securing by using policies
  • Hiding instance metadata
Module 4: Managing Logins and Passwords
  • Authentication options
  • Implementing password policies
  • Securing connection strings
  • Customizing login / user authorization
Module 5: Encryption in SQL Server
  • Key management
  • Code and data encryption
  • Managing certificates
  • Transparent database encryption
  • Encryption in HA and Disaster Recovery
Module 6: Protecting database backups
  • Securing backup files
  • Setting backup file passwords and encryption
  • Handling keys and certificate backups
  • Security considerations while restoring to another SQL Server instance
Module 7: Monitoring and auditing
  • Login auditing options
  • Data access auditing
  • Data Manipulation Language custom auditing
  • Policy-based management
  • Forensics case study
Module 8: Securing other SQL Server services
  • SQL Server Agent
  • SQL Server Analysis Services
  • SQL Server Reporting Services
  • Azure SQL Database

Form

The course has a form of intense workshop where we make a deep dive inside the SQL Server. All exercises are based on SQL Server 2016 and Windows Server 2016.

Materiale

Author’s unique tools and scripts, over 100 pages of exercises, presentations slides with notes

CPE Point (Continuing professional education)

It will be possible to earn CPE points after completion this course.

Underviser

Mike Jankowski-Lorek is a solution architect, developer, data scientist and security expert with more than 12-years’ experience in the field. He designs and implements solutions for Databases, Network & Management area, mainly for Microsoft platform for medium to enterprise level organizations. Mike holds multiple certifications, especially security, database and software development related. He is one of core Experts at CQURE and holds a PhD in Computer Science.

Video

Teknologisk Instituts vigtigste opgave er at sikre, at ny viden og teknologi hurtigt kan omsættes til værdi for vores kunder i form af nye eller forbedrede produkter, materialer, processer, metoder og organisationsformer.

>> Bestil mere information

Pris

Om udbyderen

Teknologisk Institut

+1000 kurser inden for bl.a. IT, projektledelse, ledelse, kommunikation, personlig udvikling mm.

Teknologisk Institut har leveret uddannelse til det danske erhvervsliv siden 1906, og har derfor over 110 års erfaring med kurser og uddannelser. Hvert år deltager flere end 17.000 personer på Teknologisk Instituts arrangementer, der dækker over en bred vifte af...


Læs mere og vis alle uddannelser fra denne udbyder

Få information

 

Kontaktinfo

Teknologisk Institut

Gregersensvej 3
2630 Taastrup


Få information

Udfyld formularen for mere information om Masterclass: Hacking and Securing SQL Server

Tilmeld dig finduddannelse.dk's nyhedsbrev!
Evalueringer
Denne uddannelse er ikke blevet evalueret.