BeyondTrust

Security In Context

Bringing you news and commentary on solutions and strategies for protecting your critical IT infrastructure.

Databases Need Least Privilege Too

Post by Peter McCalister May 25, 2011

The most sensitive information assets for any size company larger or small tends to be buried inside a database sitting on a server. It doesn’t matter if that server is physical, virtual or cloud based. Some organizations choose to protect the database and some the server. The best solution would be to protect both according to their intrinsically different requirements.

We at BeyondTrust have been experts in least privilege, insider threats, privilege identity management and the implications for governance, risk and compliance for over two decades now. We’ve seen an evolution in how corporations and especially our vast customer base are looking at ways of securing the perimeter within the extended enterprise as cloud and virtual sprawl takes root.

One of the most important observations recently involves the nature of database security and the debate of whether to rely exclusively on the security tools provided by the database vendor or leverage 3rd party solutions to extend those tools risk mitigation capabilities. What we are seeing mostly is that 3rd party tools do significantly extend the security, risk mitigation and compliance value to organizations and therefore critical to any database administrator’s checklist.

In this blog we have talked extensively about the value of session management (read “logging”) in concert with policy-based brokering (read “least privilege”). This also extends to the application space, and specifically databases. Watch this blog for lots more on this subject as we think it is getting very hot again.

Leave a Reply

Additional articles

smart rules manager for vulnerabilities

Staying on Top of the Latest Vulnerabilities with BeyondInsight v5.1

It’s no secret that dozens of new OS and application vulnerabilities are revealed every day. Staying on top of these new exposures normally requires paying for services or subscribing to multiple RSS feeds. BeyondInsight 5.1 provides customers with another option: a built-in, customizable vulnerability alerting system that delivers up-to-date information on the latest vulnerabilities in…

Post by Morey Haber April 21, 2014
Tags:
, , , , , ,
BI-Qualys-Connector-IMG1

Getting More Value from QualysGuard Vulnerability Data with BeyondInsight v5.1

If your vulnerability assessment scans can’t produce meaningful and actionable reports, performing a scan does no good for anyone. If you’ve read my other blog posts, you know I have no qualms about stating that BeyondTrust provides the best vulnerability reporting in the industry. Ask your favorite analyst and they’ll tend to agree. Of course,…

Post by Morey Haber April 18, 2014
Tags:
, , , , , , , ,
insider-threat-fed

Mitigating Inside Threats to U.S. Federal IT Environments

Recent high-profile cases have increased the perceived risks that go along with disclosure and usage of confidential information. One of the most difficult security threats to mitigate is an attack from the inside. When an over-privileged user, such as an unhappy current or former employee, contractor, or consultant, begins navigating your network, how will you…

Post by BeyondTrust Software April 17, 2014
Tags:
, , , , ,