Microsoft SQL Azure - Security Guidelines for SQL Azure Whitepaper
•Télécharger en tant que DOCX, PDF•
0 j'aime•483 vues
SQL Azure Database is a cloud database service from Microsoft. SQL Azure provides Web-facing database functionality as a utility service. Cloud-based database solutions such as SQL Azure can provide many benefits, including rapid provisioning, cost-effective scalability, high availability, and reduced management overhead. This document provides an overview of security guidelines for customers who connect to SQL Azure Database, and who build secure applications on SQL Azure.
![-990600-904875-400050-619125-990600-600075<br />Security Guidelines for SQL Azure<br />Author<br />Dinakar Nethi<br />Contributor<br />Michael Thomassy, Dustin Fraser<br />Technical Reviewers<br />Tony Petrossian<br />PublishedMay 2010<br />SummarySQL Azure Database is a cloud database service from Microsoft. SQL Azure provides Web-facing database functionality as a utility service. Cloud-based database solutions such as SQL Azure can provide many benefits, including rapid provisioning, cost-effective scalability, high availability, and reduced management overhead. This document provides an overview of security guidelines for customers who connect to SQL Azure Database, and who build secure applications on SQL Azure.<br />Copyright<br />This is a preliminary document and may be changed substantially prior to final commercial release of the software described herein.<br />The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information presented after the date of publication.<br />This white paper is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT.<br />Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in, or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation. <br />Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.<br />© 2010 Microsoft Corporation. All rights reserved.<br />Microsoft, ADO.NET Data Services, Cloud Services, Live Services, .NET Services, SharePoint Services, SQL Azure, SQL Azure Database, SQL Server, SQL Server Express, Sync Framework, Visual Studio, Windows Live, and Windows Server are trademarks of the Microsoft group of companies.<br />All other trademarks are property of their respective owners.<br />This document provides basic requirements for both server-side as well as client-side settings to enable connectivity to Microsoft SQL Azure.<br />The Tabular Data Stream protocol is used by all SQL Server and SQL Azure tools and client libraries to connect to the server. The SQL Azure service is only accessible through the default port of TCP/1433 used by the TDS protocol. Customers need to configure their environment to allow outbound TCP connections over port TCP/1433 to enable applications and tools to connect to SQL Azure. <br />Connecting to Microsoft SQL Azure involves multiple steps:<br />,[object Object]](https://image.slidesharecdn.com/microsoftsqlazure-securityguidelinesforsqlazurewhitepaper-100816070957-phpapp02/85/Microsoft-SQL-Azure-Security-Guidelines-for-SQL-Azure-Whitepaper-1-320.jpg)
Recommandé
Recommandé
Contenu connexe
En vedette
En vedette (15)
Plus de Microsoft Private Cloud
Plus de Microsoft Private Cloud (20)
Dernier
Dernier (20)
Microsoft SQL Azure - Security Guidelines for SQL Azure Whitepaper
- 2. Proxy servers may need to be adjusted to allow the outbound TDS protocol over port 1433. Client-side proxy software such as Microsoft ISA client may be needed to allow client computers to use proxy servers for outbound connections.
- 3. Use the SQL Azure portal to configure SQL Azure firewall settings to allow connections from your computer(s) and/or Windows Azure. More details on configuring the firewall can be found here – How to configure firewall and SQL Azure firewall
- 4. Always use the loginname@Servername format for the login since certain tools implement TDS differently. For example, if your server name is mv2abek9r7.database.windows.net and your administrator login is testsa, use testsa@mv2abek9r7 as the login.
- 5. Create appropriate logins on your SQL Azure server. After the SQL Azure server has been provisioned, create the administrator user that has admin privileges on the server, connect to your master database on your SQL Azure server via SQL Server Management Studio R2, and use the CREATE LOGIN scripts to create users and roles. More detailed information on managing logins is available at Managing databases and logins in SQL Azure
- 6. Developers and database users can now use the logins created above to connect to SQL Azure.
- 8. Configure your firewall to allow connections only to specific IP addresses.
- 9. Prevent SQL injection vulnerabilities by using parameterized queries.
- 11. Managing Databases and Logins in SQL Azure
- 12. How to Configure SQL Azure Firewall
- 14. SQL Azure Portal
- 15. SQL Azure Developer Center
- 16. SQL Azure Team Blog