Monday, May 7, 2007

 Oracle

 Oracle database auditing product aids compliance - Network World
 Sponsored LinksSee your link here.  (Related) 
 Oracle database auditing product aids compliance Audit Vault consolidates and manages information from databases

Oracle  (Related)   Monday announced general availability of auditing software that consolidates and manages information from databases  (Related)  , providing an in-depth view of audit data.

 Oracle Audit Vault is the company’s first product to specifically address auditing requirements, although Oracle has previously
embedded some auditing capability inside its databases, according to Vipin Samar, the vendor’s vice president of database
security.

 With today’s release, Oracle can help customers gather information from multiple databases to generate reports and alerts,
thus uncovering insider threats and aiding compliance with regulations like the Sarbanes-Oxley Act, HIPAA  (Related)   and the Payment Card Industry data security standard  (Related)  , he says.

 “Using the product, organizations can consolidate audit silos across their enterprise and securely house the audit data in
a single location,” Oracle states in a press release. “Additionally, Oracle Audit Vault’s alerting capability assists organizations
in detecting unauthorized access early, helping mitigate risk and potential financial liabilities.”

 The product adds to the security capabilities Oracle introduced with Database Vault  (Related)  , which controls user access to databases.

 Audit Vault works only with three Oracle databases: Oracle Database 10g Release 1, Oracle Database 10g Release 2 and Oracle9i
Database Release 2. It does not support any databases made by other vendors, though Samar says because of customer demand
Oracle will make the product work on SQL  (Related)   and IBM  (Related)   databases sometime within the next fiscal year.

 Audit Vault is one of several products that take a new approach to auditing by looking deeply within the database, as opposed
to all other kinds of infrastructure, says Trent Henry, senior analyst with the Burton Group. Audit capabilities within databases
have traditionally impacted database performance, and these new tools attempt to eliminate that problem, he says.

 A number of third-party vendors have made such products, including Imperva  (Related)   and Lumigent  (Related)  .

 Third-party vendors have the advantage of supporting multiple databases, while Oracle supports only its own, Henry says.

 Oracle, though, has intimate knowledge of databases, and many organizations that already rely on numerous Oracle products
might be willing to give Audit Vault a try, he says.

 Testing suggests Audit Vault does not significantly harm database performance, he says. Still, some enterprises are wary of
auditing databases and would rather use an appliance that watches traffic over the network, according to Henry.

 Audit Vault costs $50,000 per processor, according to Samar.

 Oracle decided to develop the product because of the market demand for tools that help comply with SOX and other regulations governing security  (Related)   and privacy  (Related)  . “All of them have a very critical auditing element,” Samar says. “They want to know who is accessing your systems and under
what conditions. They also want to know if companies have any control over them.”

 © Copyright 2007 Network World Inc. | Reprint  (Related) 
 Discuss:  Be the first to comment on this articleStart a discussion  (Related)  

 Sponsored by:






 Note:Register  (Related)   to have your user name appear; otherwise your comment will show up as "Anonymous."



 *Anonymous comments will only appear once they are approved by the moderator.



 Already have an account? Check  (Related)   to see if you're logged in.Join community  (Related) 


Click Here
  (Related) 
Click Here
  (Related) 
 Network World Newsletter

 Sign up for some of our Network Security newsletters.

Security in Practice  (Related) Virus and Bug Patch Alert  (Related) Security Strategies  (Related) Security News Alert  (Related) VPNs  (Related) Messaging  (Related)   All newsletters  (Related)  All newsletters    E-mail Address:
 Sponsored Links

Introducing Intel(r) vPro(TM) Technology  (Related) 

 Manage and protect your PC fleet with Intel(r) vPro(TM) technology.



 RESEARCH CENTERS:

Applications-Standards  (Related)   | Applications Vendor Solutions  (Related)   | CRM / ERP  (Related)   | Databases  (Related)   | Directories  (Related)   | Grid Computing  (Related)   | .Net  (Related)   | RFID  (Related)   | SOAP  (Related)   | Web Services  (Related)   | XML  (Related)   | Convergence Regulatory  (Related)   |Convergence Standards  (Related)   | Video  (Related)   | VoIP  (Related)   | Acceleration  (Related)   | Gigabit Ethernet  (Related)   | LAN Standards  (Related)   | Management Test  (Related)   | NAC  (Related)   | Identity management  (Related)   | Patch Management  (Related)   | Microsoft Security  (Related)   | Privacy  (Related)   | Security Standards  (Related)   | Viruses & worms  (Related)   | Web Security  (Related)   | Backup-Recovery  (Related)   | Data Center  (Related)   | Desktop Management  (Related)   | Grid  (Related)   | Server Blades  (Related)   | Servers Desktops  (Related)   | Telework  (Related)   | Handhelds & PDAs  (Related)   | Home Networking  (Related)   | Online Games  (Related)   | InfiniBand  (Related)   | Storage Virtualization  (Related)   | Virtualization  (Related)   | Vendor News  (Related)   | Bankruptcy  (Related)   | Earnings  (Related)   | Lawsuits  (Related)   | Layoffs  (Related)   | Standards  (Related)   | Start Ups  (Related)   | Vendor Markets  (Related)   | Education  (Related)   | Financial  (Related)   | Healthcare  (Related)   | HIPAA  (Related)   | Manufacturing  (Related)   | Retail  (Related)   | Service providers  (Related)   | PDAs & handhelds  (Related)   | Wireless Standards  (Related)   | Wireless Switches  (Related)   | All Company Profiles  (Related)  All Company Profiles  | Cisco Subnet  (Related)   | Microsoft Subnet  (Related)   | Download Library  (Related) 
 Copyright, 1994-2007 Network World, Inc. All rights reserved.

No comments: