Step-by-Step Guide: Test for a Trojan horse on your SQL Server

Has your SQL Server been acting up lately? No, I'm not referring to the typical database and operating system issues we all must endure. Rather, are you experiencing server sluggishness, erratic behavior, heavy network traffic, or an increase in server processor or memory utilization? Well, don't rule out a Trojan horse on your system. SQL Servers, like most other computers in your environment, are likely used to access the Internet and download and install software. These and other obvious stuff we do on a daily basis can provide a path for Trojan software to be installed. It may seem odd, but it's easy as pie for a server to become infected with malware – especially if it's not protected in the same ways as your end user systems.

When you come across strange things happening on your database server and before you spend countless hours trying to troubleshoot an application or database problem, run the following tests to rule out a Trojan infection.

Test for a Trojan horse on your SQL Server

 Home: Introduction
 Step 1: Scan your SQL Server for malware
 Step 2: Look in the memory
 Step 3: Look at open ports
 Step 4: Peek into your network traffic
 Step 5: Approach with a malicious mindset

---

ABOUT THE AUTHOR:

Kevin Beaver Kevin Beaver is an independent information security consultant and expert witness with Atlanta-based Principle Logic, LLC. He has more than 18 years of experience in IT and specializes in performing information security assessments revolving around compliance and IT governance. Kevin has authored/co-authored six books including , Hacking Wireless Networks For Dummies, and Securing the Mobile Enterprise For Dummies (all by Wiley), as well as The Practical Guide to HIPAA Privacy and Security Compliance (Auerbach). He can be reached at kbeaver ~at~ principlelogic.com. Copyright 2006 TechTarget

More information from SearchSQLServer.com

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT SQL Server security Secure SQL Server from SQL injection attacks How insiders hack SQL databases with free tools and a little luck Sarbanes-Oxley compliance checklist: IT security and SQL audits SQL Server source code analysis and management adds database security Ten common SQL Server security vulnerabilities you may be overlooking SQL Server 2008 security and compliance features reduce security risks Get your SQL Server security goals in order How secure is your SQL Server network design? Creating a SQL Server user authentication schema Could a join of encrypted SQL Server data have a problem? SQL Server performance and tuning Using full-text search for symbols in SQL Server Monitor database mirroring and replication after a SQL Server upgrade How to use the SELECT statement in SQL Translating information requests into SQL SELECT statements Using DISTINCT in SQL to eliminate duplicate rows SQL SELECT statement and SELECT query samples Using the ORDER BY clause of the SELECT query in SQL How to configure Database Mail in SQL Server 2005 to send mail SQL Server stored procedures tutorial: Write, tune and get examples Virtual database storage for SQL Server: Friend or foe? SQL Server availability Monitor database mirroring and replication after a SQL Server upgrade Upgrade live applications to SQL Server 2005 for high availability SQL Server high availability when upgrading to SQL Server 2005 Tutorial: Migrating to SANs from local SQL Server disk storage How to restore SQL Server database to transition server during upgrade SQL Server memory configurations for procedure cache and buffer cache Upgrade Active/Active cluster to SQL Server 2005 and Windows 2003 SQL Server backups using SAN database snapshots Tips for moving from SQL Server local disk storage to SANs How to process SQL Server 2005 Analysis Services for data availability SQL Server availability Research

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary data corruption  (SearchSQLServer.com) data hiding  (SearchSQLServer.com)

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary