SQL Server User Group–Edinburgh meet up

The SQL Server User Group will be meeting at 18:30 (for 19:00) on 29th June at Microsoft’s offices at Waverley Gate.

Agenda

18:30 – 18:50 – Introduction, Networking and Food

18:50 – 19:40 – How to get throughput of over 1GBytes per second for less than 2.5K using commodity kit – Tony Rogerson SQL MVP

In this session Tony will talk about the recent paradigm brought into play through the NoSQL movement for dealing with high performance, high scalability requirements but at a fraction of traditional costs. Tony will demonstrate a box built using commodity kit and will talk about how it may be used to good effect in a Business Intelligence setting. It will be an open discussion.

19:40 – 20:00 – Break

20:00 – 20:50 – SQL Injection Attacks (and how to prevent them) – Colin Angus Mackay

With recent reports of a man convicted of stealing the details of 130million credit cards by use of SQL Injection Attacks, isn’t it time to find out how to defend your systems against them? In this talk Colin Mackay will show you what a SQL Injection Attack is, what they look like, how they work and most importantly how to harden your application and database security in order to defend your systems against them.

Although the technologies used in this talk are SQL Server and the .NET Framework, the general ideas presented apply to any database that uses SQL as a query language, and to any framework that may interact with that database.

Colin Angus Mackay

Colin Angus Mackay is a software developer specialising in Microsoft technologies located in Glasgow, Scotland. A former Microsoft MVP (C#) for four years running, the Treasurer of Scottish Developers, Code Project MVP for five years running, and has co-organised four DDD Scotland events. While not involved in software related pursuits is an amateur photographer (which generally involves wondering why his camera’s autofocus mechanism chooses the potted plant off to the side rather than the main subject).

20:50 – 21:00 – Close

To register for this event visit: http://sqlserverfaq.com/events/262/Scottish-Area-User-Group-Meeting-June.aspx

SQL Injection Attacks and Tips on How to Prevent Them

Wednesday, 28th October 2009 at 19:00 – 21:00
Queen Margaret Building, Dundee University

The Talk

In light of some recent events, such as the man who was convicted of stealing 130 million credit card details through a SQL Injection attack, it is imperative that developers understand what a SQL Injection Attack is, how they are carried out, and most importantly, how to defend your code against attack.

In this talk Colin Mackay will demonstrate a SQL Injection Attack on an application in a controlled environment*. He’ll show you where the vulnerable code lies and what you can do to harden it.

Although this talk uses C# as the application language and Microsoft SQL Server 2008 as the database engine many of the concepts and prevention mechanisms will apply to any application that accesses a database through SQL.

* Demonstrating an attack on a real system without the owner’s consent is a breach of the 1990 Misuse of Computers Act, hence the controlled environment.

The Speaker

Colin Angus Mackay is a Software Developer living in Glasgow. He has been programming since the age of 9 starting with a Sinclair ZX Spectrum. He became a professional software developer in 1994, using a Smalltalk based language called Magik. In 1996 he started using C++ commercially and in 2002 migrated to the emerging language of C#.

Colin has received a number of awards including Code Project MVP (for 5 years) and Microsoft MVP (for 3 years). He is a member of the British Computer Society and a Member of the Institution of Analysts and Programmers. He is currently the chairman of Scottish Developers and has organised the last two Developer Day Scotland conferences (with a third in the works).

You can find out more about SQL Injection Attacks on his blog amongst other things.

The Venue

We are meeting in the Queen Mother Building at Dundee University. After the meeting we normally retire to the the bar at Laing’s

The Agenda

18:45 Doors Open
19:00 Welcome
19:10 The Talk (Part 1)
19:55 Break
20:05 The Talk (Part 2)
20:45 Feedback & Prizes
21:00 Repair to the Pub

Registration

Space is limited, we would therefore ask that you sign up.

Next SQL Server UG Meeting

This just in from Martin Bell at the SQL Server User Group:

I’ve just put up the meeting details for an User Group Meeting on the 8th October. Rob is going to be talking about useful tools for performance analysis and showing you how to use them, I’ll be following with an introduction to powershell. Check out here for more details:

http://www.sqlserverfaq.com/events/202/SQL-Server-Performance-Analysis-Tools-and-Powershell.aspx

Don’t forget that the early bird offers for SQLBits will finish on the 30th September. We have a great line up for the Thursday and Friday including a keynote speech by Donald Farmer. Make sure that you vote for the sessions you want to see on the Saturday; session voting will close on the 4th October. There is still a chance to win a free ticket to all 3 days of the conference by entering our Mug Shot competition. For more see www.sqlbits.com

SQL Bits V – Session Voting Open

If you are thinking about going to SQL Bits V, here’s your chance to influence the agenda.

This is just a quick note to tell you that voting is now open for SQLBits V. If you go to http://www.sqlbits.com/information/PublicSessions.aspx (making sure you’re logged into the site) you’ll be able to pick the ten sessions that you most want to see, and the top-rated sessions will make it onto the agenda. You aren’t obliged to vote, and if you vote for a session you aren’t obliged to attend it on the day, but voting will help us work out what topics you’re interested in.

We’d also like to point out that our ‘mug shot’ competition is closing on September 28th. If you’d like to win free entry to the training day of your choice on Thursday November 19th, free entry to the 2008/R2 day on Friday November 20th and free hotel accommodation on the Thursday and Friday nights, all you need to do is upload a photo of you and your SQLBits mug in an unlikely (but safe-for-work) situation. More details here: http://www.sqlbits.com/Competition.aspx

– SQL Bits Organising Committee.

Freelance software developers wanted

Youth Media UK Ltd, a digital media company in Glasgow, is looking for a freelance software developer to work on a number of software development projects to help improve internal business resources.

A working knowledge of C#, SQL, Crystal Reporting and ASP.NET is essential and applicants will be expected to provide examples of work and suitable references.

Please send a copy of your CV to ross@youthmedia.co.uk including details of your rates.

No agencies please.

Follow

Get every new post delivered to your Inbox.