DB Audit White Paper

DB Audit for Oracle, Microsoft SQL Server, Sybase ASE, Sybase ASA, and IBM DB2 Introduction DB Audit is a professional database auditing solution enabling tracking and analysis of any database activity including database access, logons, security breaches, user and application activities, data creation, change or deletion. The database security tracking is essential for all organizations that must be able to comply – and document their compliance – with a range of federal laws including the Sarbanes-Oxley Act, Basel II, HIPAA and other regulations. DB Audit automates the collection and review of security events for all major database systems running on different platforms. The Challenge In addition to strong authorization controls, corporate security policy requires that audit trails be maintained at the database level to insure data integrity and to detect possible security breaches or intrusions. Although many third-party software applications using a relational database have built-in auditing capabilities, they are usually incomplete and only record events that take place through the application, thus leaving any backdoor access to the database unrecorded. While most databases have built-in audit utilities, they are complex and do not provide enough detail to meet corporate auditing requirements. As a result, native database auditing utilities are often disabled. If they have been enabled, they usually are set to track a small subset of ...