This document discusses database monitoring and security. It describes detecting disruptive events like queries hitting resource limits. It also discusses securing the database by discovering sensitive data, identifying SQL vulnerabilities, and detecting suspicious activities. Common database security threats and regulations are listed. Tools are presented for vulnerability assessment, threat detection, data discovery and classification, and automatic tuning on Azure SQL Database and SQL Server.

5. Continuous monitoring
Disruptive event detection
•
•
•
Root-cause: Hitting resource limits caused by new ad-hoc query 0X9001RTYU. Impacted query 0X9002FGJR
started timing out. Consider stopping the ad-hoc query or increasing your pricing tier.
Disruptive
event
Queries:
0X9003HA4J OK
0X9002FGJR Regressed query
0X901119GI OK
0X900044RJ OK

6. One-click to enable
Prevent and mitigate issues
Tuning actions
• Create missing indexes
• Drop unused/duplicate indexes
• Force last good plan

8. Common threats
• SQL injection
• Password cracking
• Credential theft/leak
• Privilege abuse
Secure your database
1. Discover sensitive data
2. Identify & remediate SQL vulnerabilities
3. Detect & remediate suspicious database activities
4. Meet security regulations requirements
Common regulations
• GDPR (Personal)
• PCI (Payment)
• HIPPA(Health)
• FedRAMP(Government)
- No organization is immune to data breaches and security incidents
- #1 Top asset involved in breaches is the database
- 72% perpetrated by outsiders, while 28% involved internal actors
Verizon Data Breach Investigation Report 2018
SQL

9. 



*Costs $15/server/month , first 60 days for free.

10. Azure SQL
Database
Vulnerability
Assessment
Identifies, tracks,
resolves SQL security
vulnerabilities





SQL Server On-Prem
Azure SQL Database

11.  Automated discovery and
classification of sensitive data
 Labeling (tagging) sensitive data
on column level with persistency
 Audit access to sensitive data
 Visibility through dashboards and
reports
 Hybrid cloud + on-premises

12. 


Azure SQL DatabaseApps
Audit
Log
Threat Detection
(1) Turn on Threat Detection
(3) Real-time actionable alerts
(2) Possible threat to
access / breach data

13. Azure Security
Center
(ASC)
The intelligent cloud database
for app developers
Azure Log
Analytics
(OMS)
Vulnerability Assessment
Threat Detection
Data Discovery & Classification
Intelligent Insights
Automatic tuning
Azure REST APIPowerShell Azure Portal