Database Activity Monitoring - layer 7 inspection

Database Activity Monitoring (DAM) solutions secure sensitive data stored in databases. Imperva's SecureSphere provides full visibility into data usage, vulnerabilities and access rights. It enables security, audit and risk professionals to improve data security and meet compliance mandates.

Unique to the industry, SecureSphere enables customers to optimise the deployment of database security solutions by combining remote assessment scans, agent-based monitoring and network activity monitoring. Agents can be used for monitoring local privileged activity exclusively, or for monitoring all database activity.

Capabilities include;

• Audit all access to sensitive data by privileged and application users
• Alert or block database attacks and abnormal access requests, in real time
• Detect and virtually patch database software vulnerabilities based on Imperva ADC research – reducing the window of exposure
• Identify excessive and dormant user rights to sensitive data
• Accelerate incident response and forensic investigation with advanced analytics

SecureSphere Database Security Products

Database Activity Monitoring (DAM)

Delivers automated scalable activity monitoring, auditing, and reporting for heterogeneous database environments. SecureSphere helps organisations demonstrate regulatory compliance through automated processes, analysis, and reporting. SecureSphere accelerates incident response and forensic investigation with centralised management and advanced analytics.

Database Firewall (DBF)

Provides real-time database protection against internal and external threats by alerting or blocking attacks and abnormal access requests. SecureSphere provides ‘virtual patching’ for database software vulnerabilities reducing the window of exposure and impact of long patch cycles. DBF includes the auditing and analytics capabilities offered by DAM.

User Rights Management for Databases (URMD)

Enables automatic aggregation and review of user access rights. SecureSphere helps identify excessive rights and dormant users based on organisational context and actual data usage. Using URMD organisations can demonstrate compliance with regulations such as SOX, PCI 7, and PCI 8.5 and reduce the risk of data breach.

Discovery and Assessment Server (DAS)

Provides vulnerability assessment and configuration audits allowing users to measure compliance with industry standards and best practices. Data discovery and classification enable organisations to accurately scope security and compliance projects. With a combined analysis of sensitive data and vulnerabilities, SecureSphere helps prioritise and better manage risk mitigation efforts.

A freeware, 'lite' edition known as Imperva SCUBA is available from our downloads page.

SecureSphere Database Agents

SecureSphere database security solutions utilise host-based agents to monitor and audit database activity, and eliminate monitoring blind spots. Agents can be configured for monitoring local privileged activity exclusively, or for monitoring all database activity. Combined with network activity monitoring, the agents enable an optimised deployment with minimal overhead.

Supported Databases include;

• Oracle.
• Microsoft SQL Server.
• IBM DB2 (including z/OS and iSeries DB2/400).
• SyBase.
• Informix.
• MySQL.
• Progress.
• Teradata.
• Netezza.