BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Mining for Gold Through Data Analysis

Posted May 11, 2011    Peter McCalister

Last week I blogged about how to realize the value of the gold mine of information in your compliance logs. I said you need a data analysis strategy and a strategy for how to engage the organization in using that data to uncover the misuse of privilege and potential for out of compliance scenarios. The human factor is important in designing any IT systems, but how does it apply here?

Our friends at Securosis present a great example “As an example, database activity monitoring installation and maintenance falls upon the shoulders of database administrators. From their perspective, all they see is more work (and possibly a disturbing lack of faith). Not only do they have to install the product, but they get blamed for any performance and reliability issues that result. Pouring more salt into the wound, the DAM system is designed to monitor database administrators! Not only is the DBA’s job now harder because they can’t use their typical shortcuts, but now someone’s looking over their shoulder and asking annoying questions.”

Well one answer to that conundrum is to design a better DAM solution – one that’s transparent to the user and doesn’t impact performance and reliability. But in addition making the data useful to them assures they have a stake in the process and the accuracy of the data. Give them access to the data and let them use it to make their life simpler which will make them part of the solution and improve their productivity.

Leave a Reply

Additional articles

6

A Quick Look at MS14-068

Posted November 20, 2014    BeyondTrust Research Team

Microsoft recently released an out of band patch for Kerberos.  Taking a look at the Microsoft security bulletin, it seems like there is some kind of issue with Kerberos signatures related to tickets. Further information is available in the Microsoft SRD Blogpost So it looks like there is an issue with PAC signatures.  But what…

Tags:
, , , ,
Password Game Show

Managing Shared Accounts for Privileged Users: 5 Best Practices for Achieving Control and Accountability

Posted November 20, 2014    Scott Lang

How do organizations ensure accountability of shared privileged accounts to meet compliance and security requirements without impacting administrator productivity? Consider these five best practices…

Tags:
, , , , , ,
Triggering MS14-066

Triggering MS14-066

Posted November 17, 2014    BeyondTrust Research Team

Microsoft addressed CVE-2014-6321 this Patch Tuesday, which has been hyped as the next Heartbleed.  This vulnerability (actually at least 2 vulnerabilities) promises remote code execution in applications that use the SChannel Security Service Provider, such as Microsoft Internet Information Services (IIS). The details have been scarce.  Lets fix that. Looking at the bindiff of schannel.dll, we see a…

Tags:
, , , , ,