Microsoft Technology Licensing, LLC

Other

Raul Garcia

Tanmoy Dutta

Ruslan Pavlovich Ovechkin

Michael James Zwilling

Girish Chander

Erik Ismert

Jack Smith Richins

Ziquan Li

Steven Richard Gott

Craig Alan Gick

Roger Lynn Wolter

Craig Steven Freedman

Panagiotis Antonopoulos

Conor J Cunningham

Sameer Tejani

Laurentiu Bogdan Cristofor

Adrian Sorin Baras

Robert E Walters

Jiazhen Wu

Elena Daniela Cristofor

Liying Jiang

Sung L Hsueh

Sung Soo Kang

A system and method of enabling row level security through security policies is disclosed herein. In this system and method, a computing device may be communicatively coupled to a storage device. The computing device may further be activated and maintain data that comprises a plurality of rows. When executed by the computing device, the system and method may process a data definition language statement comprising a security policy definition. Further, the system and method may receive a query language statement comprising a request to access a first column of a row from the plurality of rows. The system and method may process the request and determine if access may be granted to a user based on the security policy definition in the system.

Row level security

The rail-lifting hook is a J shaped lifting hook that is specifically configured to replace chains and slings when lifting a railway track rail. The railway track rail is configured to receive the entire railway track rail within the interior surface of the hook structure of the J shaped lifting hook. The rail-lifting hook is formed as a single unit from high strength steel.

Rail-lifting hook

In one embodiment, an object in a database schema may be verified as having a valid digital signature associated with a trusted entity. An application may be permitted access to the object of the database schema only when the object of the database schema is verified to have a valid digital signature associated with the trusted entity. In another embodiment, an object in a database schema may be verified as having a digital signature associated with at least one trusted entity. An application may be permitted access to the object of the database schema only when the digital signature for the object is verified to be associated with the at least one trusted entity.

Schema signing

Systems and methods that qualify and/or restrict access of codes associated with a database to objects located outside thereof and in other databases&#x2014;even though a person executing such code does in fact have permission to interact with the object that the code is attempting to access. A sandbox component can regulate access from one database to another database, by managing authenticator permission and/or trust permission levels. Hence, the set of privileges assigned to security execution context of an executable module (procedure, trigger, computed column) in an un-trusted database is restricted not to exceed a privilege set assigned to database owner.

Database sandbox

Various technologies and techniques are disclosed for improving configuration of database audits. Multiple audits can be created for a database. Any one of the audits can be turned off without impacting an operation of any remaining audits. Database audits can be ported from one database server instance to another. Database audit metadata is stored in a database separately from a database server instance to which the database is attached. The database can be detached from the database server instance and attached to a second database server instance, with the database audit metadata moving along with the database automatically. Any audits associated with the database audit metadata are automatically activated for the second database server instance. Database audits can be configured using a hierarchical model.

Configuration of multiple database audits

Systems and methods that incorporate fuzzing capabilities within an SQL server to facilitate penetration testing. A fuzzing component associated with the SQL server provides an entry point for accessing the fuzzing system to update explicit user specified parameters associated with SQL, wherein the server's in depth knowledge regarding semantics of the language code (e.g., manner of parsing) can be employed to determine vulnerabilities thereof.

Fuzzing system and method for exhaustive security fuzzing within an SQL server

A database management system that supports multiple databases in an instance with controlled sharing between the databases. The invention can also support execution of procedures and other modules in the context of any principal possibly different from that of the caller. Trusted certificates can be employed to permit access to procedures (or other modules). The security context of the invention can enable the building blocks of building a pure trusted sub-system model of authorization.

Security execution context for a database management system

Trust model for a database management system supporting multiple authorization domains

An indexing value may be determined, transparently with respect to a requester, based on a desired plaintext item of data and a cryptographic key. The indexing value may be used to access an entry in an indexing structure to obtain a corresponding database entry which includes a non-deterministically encrypted ciphertext item. In another embodiment, an indexing structure for a database may be accessed. Positions of items of the indexing structure may be based on corresponding plaintext items. References related to the corresponding plaintext items in the indexing structure may be encrypted and other information in the indexing structure may be unencrypted. A portion of the indexing structure may be loaded into a memory and at least one of the encrypted references related to one of the plaintext items may be decrypted. The decrypted reference may be used to access a corresponding non-deterministically encrypted data item from the database.

Encrypted data search

Growing community of inventors

Kirkland, WA, United States of America

Raul Garcia