Dataskope
Why do you need to closely monitor your databases and instantly prevent data breaches?
Several crucial problematic questions are rising in your security officer’s mind that urgently need appropriate answers:
• How can I track unauthorized/unplanned access to database systems?
• How can I track and monitor developers’ and DBAs’ activities on production systems?
• How can I track access to sensitive and personal information?
• Who accessed this personal and sensitive column in these heterogeneous databases?
• Did the same intruder connect to these heterogeneous databases?
• Can you identify anomalies in activities?
• What queries were sent by this user?
• What queries were sent by this application?
• Who updated this column in these heterogeneous databases? and when?
• Is the connected user legitimate?
• Can you prevent a particular access to a particular database table?
• Can you detect an illegitimate access?
• Would illegitimate access be reported immediately?
• Can you abort it?
The list of questions can grow and become overwhelming.
What is Dataskope?
Dataskope monitors any activity happening to all your databases and can help you detect and take action to prevent malicious tempering of your most personal and sensitive data.
Dataskope records all activities and provides reporting and analytics to fulfill your auditing and compliance requirements.
Privileged user and application access monitoring is accomplished independently from native database logging and audit functions (performance).
It can function as a compensating control for privileged user ensuring separation-of-duties by monitoring administrator activity.
What benefits do you receive using Dataskope?
Dataskope monitors database activity without requiring audit subsystem of the respective RDBMS server being turned on: a huge performance benefit. It classifies and correlates the audit logs and stores them outside the database complying with separation-of-duties principle and enabling analysis across heterogeneous databases. It ensures that a service account can access a database only from a defined source, and only runs a narrow group of authorized queries. This can be used to detect "compromises of a service account" either from the system that normally uses it, or if the account credentials show up in a connection from an expected system.
Dataskope agents can record all SQL statements (DML, DDL, DCL, and TCL) without relying on local database logs, thus reducing performance degradations.
What are the main features of Dataskope?
Monitor logins: monitor successful and failed logons and ensure they are from predefined and valid legitimate sources.
Monitor changes: monitor and audit all DML, DDL, TCL and DCL commands (SELECT, UPDATE, DELETE, EXEC, and other SQL statements).
Monitor access to sensitive information: monitor who is accessing sensitive information. When the unexpected happens generate alerts and/or prevent it from happening.
Monitor privileged users: audit dba/developer activity and configuration changes to the database system.
Generate reports, and dashboards, Perform analytics and M/L: predefined policies and reports for PCI, SOX, and other generic compliance requirements; highlighting “data product” consumption, derived from the activities using analytics and M/L.
