Security Management Strategies for the CIOAccess "Guardians of the Crown Jewels"
This article is part of the March 2005 issue of What are botnets and how can you prepare for them?
TECHKNOWLEDGE Database security products promise an extra measure of security for your most valuable assets. Are they worth the price? The crown jewels are at risk: intellectual property, customer ID information and financial records encased in corporate databases. If they're vulnerable, so are your company's finances and reputation. And regulatory compliance failure, triggered by a serious breach or audit that reveals lax database security, can bring heavy fines and/or jail time. Perimeter defenses alone, such as firewalls, IPSes and Web app shields, can't ensure security in the face of Web-based attacks that exploit myriad database configuration vulnerabilities and insecure front-end Web code. Your best strategy against these attacks is to harden their target: Properly configured databases will stand strong against most attacks. Moreover, the landscape is changing. Industry database leaders Oracle and Microsoft are beefing up security in new versions of 10.g and SQL Server, respectively, which are better configured out of the box than their predecessors ... Access >>>
Access TechTarget
Premium Content for Free.
What's Inside
Features
-
-
Recent Releases: Security product briefs, March 2005
Read about security products that were released in March 2005.
-
Guardians of the Crown Jewels
Database security products promise an extra measure of security for your most valuable assets. Are they worth the price?
-
Secure Reads: Outsourcing Information Security
Read a review of the book, Outsourcing Information Security.
-
Crypto Hazard
Could cryptography be the next destructive malware payload?
-
Double-Check with Routers
Conventional routers are the perfect network security auditing device. Take advantage of what they see.
-
Wireless Firewall
AirMagnet Enterprise 5.0
-
Recent Releases: Security product briefs, March 2005
-
- Invasion Force
-
BARRIER1 Model 50 product review
Product review of Barrier1 Model 50 open source security appliances cost, reporting and Web content and email filtering features.
-
Hot Pick: Enterasys's Dynamic Intrusion Response
Dynamic Intrusion Response
-
Vulnerability management: Visionael Enterprise Security Protector 3.0
Visionael Enterprise Security Protector 3.0
-
Configuration Management: St. Bernard Software's SecurityEXPERT 1.0
SecurityEXPERT 1.0
-
Columns
-
Perspectives: Tearing down Firewalls
Firewalls do little more than inhibit your business, writes Paul Simmonds of the Jericho Forum.
-
Layer 8: Finding a template for good information security
Security by Numbers
-
Logoff: Why Microsoft keeps infosec in business
The Wal-Mart of Security
-
Editor's Desk: 'Motivation by embarrassment'
Making the Grade
-
Perspectives: Tearing down Firewalls
More Premium Content Accessible For Free
Unlock new pathways to network security architecture
E-Zine
Network security architecture is showing its age at many organizations. With new technology, different data types, and use of multi-generations of ...
Emerging threat detection techniques and products
E-Handbook
Advanced persistent threat (APT) has been a used and abused term in the security industry, but security experts say targeted attacks are a growing ...
The rapid evolution of MDM solutions
E-Zine
Mobile device management (MDM) continues to grow at a feverish pace, both in terms of adoption and mobile security features. BYOD policies, and the ...