I am trying to build a big project but lack the knowledge of security of servers and SQL. So, please help me by telling what necessary steps should i take.
Block all remote access :- I have heard that through firewall you can block all the remote users to connect your server unless you have allowed a specific IP to access the server (by adding a rule to firewall). Will this be enough to keep hackers away?
If a SQL user is only given GRANT EXEC rights will he be able to do anything except run the store procedures?
Should i go for Microsoft or Linux based OS : I have heard linux based I/O is very fast that is necessary for my application but is it more secure as compared to Microsoft?
Please feel free to correct me wherever i am going wrong as i am a newbie .
Thanks in advance