The SQL Server 2016 database engine has been greatly enhanced for security, with three new features you'll learn about in this demo-packed session. With dynamic data masking (DDM), you can fully or partially conceal sensitive columns from query results. Masking does not modify data on in the table, it simply hides data from users that don't have access permission. Row-level security (RLS) also hides data from unauthorized users, but at the row level. With RLS, you can create your own security policy to control which users can read or write specific rows in the table. Finally, Always Encrypted (AE) uses client-side encryption to ensure data is encrypted in flight, not just at rest. And the encryption keys are accessible only to the client. This guarantees that data cannot be decrypted on the server, easing the migration path to the cloud for users with highly sensitive data.

You will learn:

• How dynamic data masking (DDM) can hide sensitive columns from unauthorized users
• About row-level security (RLS) to filter or block individual rows from different users
• About Always Encrypted (AE), a new client-side database encryption technology available in SQL Server 2016