A brief description of Windows 2008 Server Data Security

Data Security is a key requirement in any data services solution, and Windows Server 2008 and SQL Server 2008 combine to provide an end-to-end data protection through a powerful set of encryption-based technologies. Windows Server 2008 relies on built-in

Data security is a key requirement in any data services solution, and Windows Server 2008 and SQL Server 2008 combine to provide an end-to-end data protection through a powerful set of encryption-based technologies.

Windows Server 2008 relies on built-in IP Security (IPSec) support to provide encrypted data transfer over a network connection.

Windows Server 2008 provides an enhanced IPSec implementation that simplifies configuration and reduces administrative overhead.

NTFS:

NTFS is a family of operating systems supported by Microsoft Windows NT kernel, a special for the network and disk quotas, file encryption and other security features Management Designed disk format.

Why use NTFS?

Compression: Includes the ability to compress or decompress drives, folders, or specific files.

File Encryption: It greatly enhances security.

Better scalability: Partitioning NTFS partitions is much larger than FAT partitions. When partition size increases, NTFS performance does not degrade, and in this case FAT performance is degraded.

Recovering log activity for disk activity; it allows NTFS to recover information as soon as possible due to power outages or other system problems.

Installing NTFS is required to install domain controllers and Active Directory.

Remote Storage: the movable media (such as tape) easier access to extend the disk space.

Disk Quota: Can be used to monitor and control the amount of disk space used by a single user.

Windows Server 2008, NTFS for transactions, which allows all operations in the NTFS file system to be controlled in a single transaction, allowing the operating system services to join through the new kernel transaction manager. Into a transaction.

Server 2008 The FILESTREAM data type allows large binary data, such as documents and images, to be stored directly into an NTFS file system; documents and images are still a major part of the database and maintain transactional consistency.

FILESTREAM allows traditional large database-managed binary data to be stored as separate files outside of the database, which can be accessed using an NTFS streaming API. Use the NTFS Streaming API to enable normal file operations to be performed efficiently, while providing all the rich database services, including security and backup.

NTFS for transactions can also communicate with MS DTC (Distributed Transaction Center). In this way, the application can be composed of database calls, as well as file system operations (such as document management systems). This transaction function is built on the SMB 2.0 (Server Message Module) protocol, so a distributed file operation can be included in a single transaction.

TDE:

SQL Server Transparent Data Encryption (the TDE) in 2008, the selection unit may use the same encryption level is the same in SQL Server 2005, or Is to use TDE for full database-level encryption, or file-level encryption provided by Windows.

It is designed to provide static protection for the entire database without affecting existing applications. Encrypting a database has traditionally involved complex application changes, such as modifying table schemas, removing functions, and significant performance degradation.

TDE simply encrypts everything, all data types, keys, indexes, and so on, all of which can be used without sacrificing security or leaking information on the disk.

TDE is a file-level, it and two Windows-like properties: file encryption system (EFS) and the driver disk encryption.

TDE does not replace cell-level encryption, EFS or BitLocker. TDE is suitable for large amounts of encryption, and it can meet regulatory compliance or public data security standards.

TDE protects data when data files or backup files are accessed and copied. When combined with hardware security module support, TDE provides an effective way to protect data stored in a database on a desktop computer. This encryption ensures that when the computer is lost or stolen, the database cannot be opened without the corresponding secure hardware module. To better protect data, Windows Server 2008 provides enhanced Microsoft BitLocker driver encryption technology that can be used to encrypt all hardware disks in your computer.

SQL Server 2008 further extends this capability by supporting encrypted database connection for data protection when transmitted over the network, but also provide new, powerful display of data Encryption (TDE) feature. TDE encrypts the data in the database and backup files without having to make any changes to the client application that accesses this data.

Summary:

SQL Server 2008 and Windows Server 2008 combine to provide a compelling solution for security, compliance and high availability. Program.