I received great news last week that one of my sessions, Windows Operating System Internals for DB Pros, was accepted, meaning I will be making the trip to Dallas!

However, I also have two other sessions up for the community to vote on. They are:

Attacking SQL Server

Database Administration Track

It is a well-known maxim in warfare to know your enemy. In this session, we'll take a look at how attackers go after SQL Server, both directly and through indirect means such as the application and the operating system. We'll talk about the typical attack methodology and what you can do to secure your SQL Server and your applications from attack.

We'll examine normal response mechanisms to attacks like SQL injection and how attackers have creatively elevated their techniques to bypass those defenses. We'll also consider mechanisms outside of SQL Server, such as OS-level tricks like IPSEC policies and network access control lists that you can take back to your shop and work with other IT professionals to get implemented. Finally, we'll discuss what can happen once a SQL Server is compromised and how it can be used as a vector for further attacks into your enterprise, how to craft your practices to prevent this, and what to consider when the real goal of the enemy might not be your SQL Server, but something greater (such as your domain).

Being the Swiss Army Knife of Database Professionals

Professional Development Track

Being a specialist means you're really, really good at one thing. Being a generalist means you're good at a a lot of different things. The generalist has an advantage over the specialist because he or she can see and solve problems the specialists can't. In this session I'll cover why it's important to diversify your skill set, not only for career protection, but to be better as a database professional. Taken from my own experience as an infrastructure architect, security professional, developer, and SQL Server DBA, we'll look at what skill sets to build on to expand your abilities around SQL Server to include the operating system, development, networks, and security. Remember, this saying isn't complete, "Jack of all trades, master of none." The full saying is, "Jack of all trades, master of none, though often times better than master of one."

If either of those are sessions yoou'd like to see at SQLRally, please vote at the SQLRally Community Choice page.