Database Auditing
We've just added an article on database auditing to the Messaging and Web Security Essential Series. Here is an excerpt:
Database security is gaining more attention and justifiably so. Concerns about compliance, privacy protection and data loss will naturally lead to measures to secure databases and the data they hold. As with other areas of information security, a defense in depth strategy can significantly reduce risks associated with databases. A key element of this strategy is database auditing.
Database auditing can be divided into two subtasks: security assessment auditing and information access auditing. A security assessment audit entails vulnerability scanning, code reviews and an analysis of database management policies and procedures. These are typically done at regular intervals and in conjunction with broader IT operations audits. Information access auditing is more of a monitoring operation and will be the subject of this article. For the remainder of the article, when reference is made to database auditing, it means information access auditing.
This is just one of 25 articles on Web, messaging, database, and related security topics available in the Essential Series.
Email This!
Digg it!
Sphere it!
Del.icio.us
Reddit!
Newsvine
