BeyondTrust

Security In Context

Bringing you news and commentary on solutions and strategies for protecting your critical IT infrastructure.

I See Dead People- and All Database Activity

Post by Peter McCalister August 26, 2011

Remember The Sixth Sense, that movie where Haley Joel Osmond’s character can see ghosts are if they were living people? It’s an interesting premise to give a character such a unique and special capability- to see and communicate with ghosts, whether benign or hostile, is clearly something out of the ordinary. Knowledge is power, and because he knew they were there and could communicate with said entities, he eventually was able to diffuse tense situations and helped achieve solutions in the existence of the ghosts in the movie.

Since this is a blog about enterprise security, let’s take a look at the film through the eyes of an IT administrator. There is one huge parallel that I can’t help but draw- the ability to see entities that others aren’t aware of. While we may not have to deal with actual ghosts, that specific ability to see and communicate with things that otherwise go unnoticed is one of the keys to compelte enterprise security. Also known as monitoring, that communication and awareness is crucial to an effective security program.

So many things in an enterprise need to be monitored. Privileged users, what users can and cannot access, all activity (down to the keystroke level), access to systems, error reports, security controls, compliance reporting, and session activity are just a few. Without monitoring, those responsible for IT have no idea what is going on in these areas. It’s impossible to know where problems exist and what can be done to fix them, and it’s hard to be confident in the status of your company’s secure information. Monitoring is also a huge part of having a compliant IT infrastructure. The ability to oversee activity is critical, and truly a capability that must be included in each IT environment’s security strategy.

Click here to learn how to go Sixth Sense on your IT infrastructure.

Leave a Reply

Additional articles

smart rules manager for vulnerabilities - v2

A New Way of Looking at Vulnerabilities in Your Environment

Assets, users, vulnerabilities and exploits; all are common themes in my posts on BeyondInsight. With BeyondInsight v5.1, we unveiled a new way to view exploitable assets. Sure, most vulnerability management solutions link vulnerability data to exploit information, allowing tools like NeXpose and QualysGuard to list an asset, its vulnerabilities, and any related exploits. BeyondInsight does…

Post by Morey Haber April 23, 2014
Tags:
, , , , ,
smart rules manager for vulnerabilities

Staying on Top of the Latest Vulnerabilities with BeyondInsight v5.1

It’s no secret that dozens of new OS and application vulnerabilities are revealed every day. Staying on top of these new exposures normally requires paying for services or subscribing to multiple RSS feeds. BeyondInsight 5.1 provides customers with another option: a built-in, customizable vulnerability alerting system that delivers up-to-date information on the latest vulnerabilities in…

Post by Morey Haber April 21, 2014
Tags:
, , , , , ,
BI-Qualys-Connector-IMG1

Getting More Value from QualysGuard Vulnerability Data with BeyondInsight v5.1

If your vulnerability assessment scans can’t produce meaningful and actionable reports, performing a scan does no good for anyone. If you’ve read my other blog posts, you know I have no qualms about stating that BeyondTrust provides the best vulnerability reporting in the industry. Ask your favorite analyst and they’ll tend to agree. Of course,…

Post by Morey Haber April 18, 2014
Tags:
, , , , , , , ,