McAfee Integrity Monitoring for Databases

McAfee Integrity Monitoring for Databases

用于评估和监控系统安全性的经济有效的数据库解决方案

后续步骤:

概述

McAfee Integrity Monitoring for Databases 测试系统的常规配置漏洞,监控对这些设置的更改,以及帮助您生成自定义安全策略以访问敏感数据,提供具有潜在危险的配置更改的可视性,并且更容易证明合规性。

数据库配置设置的集中式检查 - Integrity Monitoring for Databases 是一种易于部署的解决方案,用于评估整个企业中最广泛部署的数据库平台(Oracle、Microsoft SQL Server、IBM DB2 和 MySQL)的安全状态,包括版本/补丁级别、审核设置、配置参数和权限。

增强的数据库安全状态可视性 - 通过评估和监控数据库配置设置以及对敏感数据的访问权限,组织可以证明合规性并将违规的可能性降到最低。

简化的软件升级 - 通过简便的方法轻松升级您的软件以具备更多高级功能,而不影响到现有操作或性能。您可以通过添加 McAfee Vulnerability Manager for Databases(带有更多数据库服务器扩展测试功能)和 McAfee Database Activity Monitoring(带有可自定义的规则和入侵防护机制)来提高核心安全性。

特点和优势

通过更快的部署和更高效的体系结构来节省时间和财力

立即开始测试和监控数据库服务器。您可以在无需更改数据库系统的情况下安装 McAfee Integrity Monitoring for Databases。

通过在所选的 IT 基础架构上进行部署来增加灵活性

在物理服务器上安装 Integrity Monitoring for Databases,使其与虚拟机上的数据库协同工作,并在云服务器上进行远程部署。

当对设置所做的更改可能影响到数据库安全时可收到实时通知

监控并记录高风险的交易,包括 DDL(数据定义语言)、删除/修改表、权限授予、对审核设置的更改以及相关配置参数。针对可能影响安全性的配置更改生成可靠的审核日志。

接收立即可用的法律合规报告

针对合规性法规生成预配置报告,并按照管理员用户、过期用户和数据库属性等分别创建自定义报告。

支持虚拟化和云计算环境

设置传感器可与每个虚拟机上的数据库协同工作,并在云服务器上进行部署以启用远程测试和监控功能。

系统要求

以下仅为最低系统要求。实际要求将视具体环境而定。

最低系统要求

  • McAfee ePolicy Orchestrator 4.5
  • Microsoft Windows Server 2003 Service Pack 2 (SP2) 或更高版本
  • Microsoft SQL Server 2005 SP1 或更高版本
  • 2 GB RAM
  • 1 GB 可用磁盘空间
  • 浏览器(针对管理控制台):Firefox 2.0 或更高版本、Microsoft Internet Explorer 7.0 或更高版本

可监控的数据库

  • 运行于 Sun Solaris、IBM AIX、Linux、HP-UX、Microsoft Windows 上的 Oracle 8.1.7 或更高版本
  • 在任何支持的 Windows 平台上运行的 Microsoft SQL Server 2000 或更高版本
  • 在所有支持的平台上运行的 Sybase ASE 12.5

演示/视频

演示

Learn how the McAfee Database Security Solution protects you from database breaches and falling victim to cybercrime. This solution includes McAfee Vulnerability Manager for Databases, McAfee Database Activity Monitoring, and McAfee ePolicy Orchestrator software.

Use a single solution and achieve continuous compliance with McAfee Configuration Control.

新闻/活动

新闻

活动

未找到结果

资源

产品简介

McAfee Integrity Monitoring for Databases (English)

For a technical summary on the McAfee product listed above, please view the product data sheet.

解决方案简介

白皮书

社区

论坛

未找到结果

博客

  • RDP+RCE=Bad News (MS12-020)
    Jim Walter - 三月 14, 2012
    See March 15 and 16 updates at the end of this blog. —————————————————-   The March Security Bulletin release from Microsoft was relatively light in volume. Out of the six bulletins released, only one was rated as Critical. And for good reason. MS12-020 includes CVE-2012-0002. This flaw is specific to the Remote Desktop Protocol (RDP) present on Read more...
  • An Update on DNSChanger and Rogue DNS Servers
    Jim Walter - 三月 06, 2012
    In late 2011, the FBI released documents and data focusing on “Operation Ghost Click.” This malicious operation, leveraging a variety of DNSChanger-type malware, was defined by the FBI as an “international cyber ring that infected millions of computers.” Associated malware samples and events can be traced back several years, and multiple platforms were targeted. To this day many remain Read more...
  • McAfee Q4 Threats Report Shows Malware Surpassed 75 Million Samples in 2011
    David Marcus - 二月 21, 2012
    Today we released our Fourth Quarter 2011 Threat Report, revealing that malware surpassed the our estimate of 75 million unique malware samples last year. Although the release of new malware slowed a bit in Q4, mobile malware continued to increase and recorded its busiest year to date. Malware The overall growth of PC-based malware actually Read more...
  • Cultural Security: Promoting Security Policies Using Organizational Culture
    Steven Fox - 九月 06, 2011
    Most of us refer to security policies in much the same way as we refer to our car manuals – when something unexpected happens.  We know these documents have useful information.  However, their utility is tied to situations where answers do not present themselves readily. According to Chris Noel, SVP of Product Management at ANXeBusiness, Read more...
  • Building an Arsenal of Best-in-Breed Database Security Solutions
    Eric Schou - 八月 19, 2011
    Visit any news site on the Web, and undoubtedly you’ll come across a barrage of articles publicizing the details of yet another data breach. With the prominence of SQL injection attacks, and malicious insiders and hackers exploiting sensitive data stored on unpatched and vulnerable databases, enterprise organizations have found themselves reevaluating their security strategies. Following Read more...