I’m going to talk about one of the TOP-5 most important things that need to be checked in the Active Directory, Permission Delegation. This is quite overlooked security topic. However, it’s very important to understand how permissions are working in active directory. What are the paths for a potential attacker to compromise our environment and how we can defend ourselves from potential attack?

Paula and Mike will focus on network connectivity between a client and a server. Paula will do parameter sniffing, replace some parts of the queries and make changes to the database — and Mike will show you how to use certificates and encryption to prevent this type of attack.

I’m going to present a very nice feature of SQL Server — actually one of my favourite new features in SQL Server. This is SQL Server Always Encrypted Data.