Here’s a good white hat article on how to defend your SQL Server from malicious attacks. It’s pretty high level, and definitely just a starting point. Careful DBA’s will definitely do some more research in this area. You’ll also probably want to use some of the recommended tools rather than just flying by the seat of your pants.