This documentation is archived and is not being maintained.
This documentation is archived and is not being maintained.
Threat and Vulnerability Mitigation (Database Engine)
Although SQL Server includes a variety of security mechanisms, every system has features that could be exploited for malicious purposes. This page provides links to help you locate the information that you need about threats and vulnerabilities in the SQL Server Database Engine, and how you can eliminate them.
SQL Injection attacks work by embedding a malicious query in a legitimate one. Read this topic to learn how injection attacks work and what you can do to help secure against them.