Database Security

Ensuring strong database security largely comes down to controlling administrative privilege and the automated analysis of static and dynamic SQL. This is a difficult problem in large environments. The obvious approaches introduce performance problems, log volume problems and complexity.

The best approach is often a passive technique to collect audit data that is invisible to the databases themselves, or a targeted approach to collect data that supports decision making. Evercom can provide passive data collectors that SPAN a network, or reside on the host itself to capture .NET, interactive and all other SQL data, without any significant performance overhead.

Critical to ensuring the right outcomes is ensuring that the scope of audit data collection is minimal and sufficient. Our solutions ensure separation of duty, monitor SYSDBA activity, generate analytics, and work with all common databases including Oracle, Sybase, MS-SQL, DB2 and mySQL.