Paul S. Randal has written a very interesting article about SQL Server Security, most of you already know all the things he wrote, not? ;)

http://technet.microsoft.com/en-gb/maga ... #id0100060

Content:

Physical Security
Network Security
Attack Surface Minimization
Service Accounts
Restricting Use of Administrator Privileges
Authentication
Authorization
SQL Injection
Disaster Recovery
Auditing
Summary