(Vulnerability and configuration evaluation, through the vulnerability evaluation, usually get some detailed recommendations. This is the first step in enhancing database maintenance. Other elements of enhanced maintenance include removing any features and options that are not in use. Once a configuration with enhanced security maintenance has been created, it is imperative to keep track of it to ensure that you have not strayed from your "golden" (safety) configuration. This command can be terminated by changing statistics tools that can compare snapshots of the configuration (at both OS and database levels) and issue immediate warnings when changes occur that may affect database security. Real-time monitoring of database flows is essential with regard to limiting information exposure through timely detection of intrusions/intrusions and misuse. For example, DAM can warn of abnormal access patterns that imply SQL injection attacks, unauthorized changes to financial data, account privilege escalation, and configuration changes executed through SQL commands. Monitoring privileged users is also a requirement under data management regulations such as SOX and data privacy regulations such as PCIDSS. Intrusion detection is also important, as attacks often allow attackers to gain privileged user access (such as through credentials used by your business). DAM is also a key element of vulnerability assessments, as it allows you to go beyond traditional static assessments to include dynamic assessments of "behavioral vulnerabilities" such as multiple users sharing privileged credentials or too many failed database logins.
Teach you how to achieve overall database security in 8 steps.pdf)
收藏
