Sep-2011 ~ How to audit and prevent unwanted user actions ~ John Miner

 

Presenter: John Miner of Sensata Technologies
Topic: How to audit and prevent unwanted user actions

 

Many corporations are composed of small divisions located in countries throughout the world. While you might be the lead DBA for your corporation, there are several other employees who have the keys to the kingdom. How do you prevent and audit unwanted user actions to key data?

This presentation will review techniques on how to prevent and/or audit data and schema changes.

The following topics will be presented with examples.

1. Granting correct user access is vital
2. Using DML triggers to keep an DATA audit trail.
3. Using DDL triggers to keep an SCHEMA audit trail.
4. Preventing unwanted DATA modifications
5. Preventing unwanted SCHEMA changes
6. Preventing table TRUNCATIONS
7. New Feature in 2008 – change data capture

Biography:

John Miner (www.craftydba.com) has twenty years of data processing and proven project management experience, specializing in the banking, health care, and government areas. His architecture expertise encompasses all phases of the project life cycle, including design, development, implementation, and maintenance. His credentials include a Masters degree in Computer Science from the University of Rhode Island with concentrations in database technologies and programming languages. He has Microsoft Certificates for Database Administration (MCDBA) and System Administration (MCSA).

Apr-2011 ~ Database Design for mere Developers ~ Steve Simmon

 

Presenter: Steve Simon of State Street Bank
Topic: Database Design for mere Developers

 

Efficient and effective database design is so important that leaving it solely to the DBAs is simply not a solution. We as developers will more than likely have to create applications to access the data stores and as such must ensure that all application related considerations are taken into account within the database design. In this session, (aimed at software developers) we shall be touching upon several concepts of special importance to the developer. These include database development “patterns and anti-patterns”, final proofing of design and creating versatile deployment scripts that can and will be utilized in future endeavors.

Biography:

Steve Simon is an AVP with State Street Corporation Boston. He has been involved with database design and analysis for over 20 years. Steve has presented papers at eight PASS Summits and two at PASS Europe 2009. He has just recently presented his PASS 2008 Summit presentation in Johannesburg South Africa. Steve has also presented 5 papers at the Information Builders’ (IBI) International Technology Summits. He has also had 2 papers published in IBI Journal & is a regular Webinar presenter for IBI.

Mar-2011 ~ Leveraging TSQL to solve business problems ~ John Miner

 

Presenter: John Miner of Sensata Technologies
Topic: Leveraging Transaction SQL 2008 to solve business problems

 

This presentation will review how to build a database solution from the ground up using SQL commands. What if you were a SQL Server developer at a local consulting company tasked with creating a database for a local Boy Scout of America (BSA) Troop, where would you begin?

The following topics will be reviewed to make sure you have a successful data storage solution.

Defining the Database: Defining file groups for the database, Creating schemas to separate tables by functionality, Creating normalized tables to hold the BSA data, Adding data integrity to the design with constraints/triggers, Adding referential integrity to the design with primary/foreign keys, Adding logins/users and granting rights Loading initial Data:

Loading data into staging area with BULK INSERT, OPENROWSET or BCP, Quick review of TSQL statements for TRANSACTIONS, CONTROL FLOW, and ERROR HANDLING, Writing Stored Procedures to move staging data to production, Schedule Procedures using SQL Server Agent Giving Developers Access: Using stored procedures to lock down CRUD (create, read, update, and delete) operations, Using functions and views to look at the data differently.

In my next presentation, I will be going over advance topics such as PARTITIONING – for keeping track of all those Christmas Trees they sell each year, FILESTREAM – for showing images of the merit badges they might earn, SPATIAL – for keeping track of GPS latitude and longitude coordinates when hiking, and XML for interacting with other systems via messages.

In my next presentation, I will be going over advance topics such as PARTITIONING – for keeping track of all those Christmas Trees they sell each year, FILESTREAM – for showing images of the merit badges they might earn, SPATIAL – for keeping track of GPS latitude and longitude coordinates when hiking, and XML for interacting with other systems via messages.

Biography:

John Miner (craftydba.com) has twenty years of data processing and proven project management experience, specializing in the banking, health care, and government areas. His architecture expertise encompasses all phases of the project life cycle, including design, development, implementation, and maintenance.

His credentials include a Masters degree in Computer Science from the University of Rhode Island with concentrations in database technologies and programming languages. He has Microsoft Certificates for Database Administration (MCDBA) and System Administration (MCSA).

Mar-2010 ~ Management Studio Tips & Tricks ~ Aaron Bertrand

 

Presenter: Aaron Bertrand of SQL Sentry
Topic: Management Studio Tips & Tricks

 

 

A collection of little things you can do with Management Studio so you can start faster, work smarter, prevent mistakes, and present better!

Biography:

Aaron holds the position of Senior Data Architect at One to One Interactive in Boston, Massachusetts, responsible for database design and architecture. He has been a Microsoft MVP since the 1997-98 award year, and continues to devote spare time to helping the community – be it on the SQL Server newsgroups, StackOverflow, sqlblog.com, or live events like this one

Note:

Since the venue was needed by NEIT on Wednesday, 10th March 2010. March’s meeting has been moved to Monday, 15th March 2010. The time and venue remains unchanged (6PM – 9PM).

Jul-2009 ~ SQL Injection Attack – Defense ~ Andrew Novick

 

Presenter: Andrew Novick of Novick Software
Topic: Defending SQL Server from SQL Injection Attacks

 

SQL Injection attacks have emerged as the application security issue that creates the most data loss and web site defacement incidents passing cross-site scripting.

Defending SQL Server from SQL injectioncontinues to be a problem for many applications. This presentation will discuss the ways that SQL Server developers and DBA can harden their applications and servers.

The methods demonstrated include:

  • Protecting Dynamic SQL statements when they can’t be eliminated
  • Security configuration to minimize the vulnerable surface area
  • Using DML triggers to thwart many common attacks
  • Managing stored procedure privilege with the EXECUTE AS clause
  • Using DDL triggers to minimize vulnerabilities
  • Ineffectiveness of database and column encryption as defenses

The SQL Server is one of the most vulnerable components of an application and one of the most frequently attacked. Come hear about the techniques you can use to protect it from SQL injection attacks.

Biography:

Novick Software is the New England based consulting company of Andrew Novick. Over the last 24 years I’ve been managing projects, consulting, writing, teaching, and
programming to create software applications for both operations and analysis. The most important thing that I can do for my clients is to understand what drives their business. Only by understanding their problem
or what they’re trying to achieve can an effective solution be found.

May-2009 ~ ETL Integration done the right way ~ Bob Hoffman

 

Presenter: Bob Hoffman of Information Builders
Topic: ETL integration done the right way

 

This presentation covers the following topics:

  • Enterprise Information Management (EIM)
  • Event Integration
  • Content Integration
  • Data Quality
  • Master Data Management

Biography:

Bob Hoffman is a Senior Systems Engineer for Information Builders in Boston. Bob has held numerous positions in his 26 year tenure with IBI.

He has experience on almost every platform and database including ZOS, iSeries, UNIX, Windows as well as expertise in all of IB products from both the Business Intelligence and Integration (iWay) perspectives.

Bob has worked with the integration products since their inception including ETL, ESB and Adapters and has applied this technology at numerous customers. He has been a regular presenter at Information Builders user group meetings.

Bob currently resides in Connecticut and his interests include Computing, Baseball, Skiing, Karate, Lionel Trains and raising 2 boys.

Apr-2009 ~ Real Time Integration ~ Richard Thomas

 

 

Presenter: Richard Thomas of Attunity
Topic: Real Time Integration

 

This presentation covers the following topics:

  • Change Data Capture
    1. Data Changes
    2. Transactions
  • Loosely Coupled Integration
    1. Scalable
    2. Recoverability
    3. Fault Tolerance
  • Integrating with Non-Microsoft Platforms
    1. High-Speed Connectors – Oracle
    2. High-Speed Connectors – Teradata
    3. Attunity Connectors – Legacy Sources

Feb-2009 ~ IWAY versus SSIS ~ John Miner



Presenter: John Miner of Citizens Bank
Topic: IWAY versus SSIS

Which tool might be better for your company’s infrastructure environment?

 

The first part of this presentation will discuss topics related to Extracting, Translating and Loading (ETL) data from various sources to various targets. It will give you a high level over view of ETL concepts and tools in the market place.

The second part of this presentation will showcase two totally different ETL tools: IWAY 7.14 development environment from Information Builders and SSIS 2005 development environment (SQL Server Integration Services) from Microsoft Corporation.

Common functionality between the tools will be explored using the North-Wind database an example source system and several different target formats. ETL job error handling, logging, scheduling, and other interesting features will be explored during this demonstration.

If you are deciding which ETL tool to select for your company in the future, this is a must attend presentation!

Biography:

Has twenty years of data processing and proven project management experience, specializing in the banking, health care, and government areas. His architecture expertise encompasses all phases of the project life cycle, including design, development, implementation, and maintenance.

His credentials include a Masters degree in Computer Science from the University of Rhode Island with concentrations in database technologies and programming languages. He has Microsoft Certificates for Database Administration (MCDBA) and System Admistration (MCSA).