飞塔FortiDB数据库安全产品2009.pptVIP

数据安全漏洞不断的上升 数据库安全面临的挑战 数据库安全面临的挑战 数据库安全面临的挑战 IT 数据库控制的几大问题 不良的访问控制过程设计 对商业数据/私人数据理解不足 职责分离不清 环境复杂 大量特权用户 易受攻击的数据库安全策略 资源和时机的缺乏 对需要做哪些事情理解不充分 全面的数据库安全 建立强有力的变动管理流程 审计你的企业数据库 信息安全现状 法国兴业银行 -70亿亏损 2008年1月份法国兴业银行被曝因欺诈性交 易亏损70多亿美元交易员杰洛米·凯维埃尔 违规操作。 身份窃密、计算机黑客以及各种各样的数据 泄露已经非常频繁,但在很多情况下，数据 安全问题一直是公司不敢披露的风险。 漏洞评估(VA) 数据库安全品牌 国内主流产品 亚龙（安恒）信息科技（杭州）有限公司 明御TM数据库审计与风险控制系统(简称：DAS-DBAuditor) DAS-A500，DAS-A1000，DAS-A3000 明鉴TM数据库弱点扫描器(简称:DAS-DBScan) * * An issue that all business are grappling with is the “insider threat” i.e. you have good external security protection but what about the internal employee that may be a risk. FortiDB can really help mitigate this risk by protecting your key data at source i.e. at the database level. Some times data loss may not be a malicious action but occur accidental like the employee who lost the notebook with 360,000 Boeing employee details. The knee jerk reaction is to encrypt notebook HDD but how about a strategic approach which ensures the data can never be taken out of the database in the first place, this is where we can implement a solution that can stop any significant downloads of data out of the database. The external and internal auditors are now pushing the need to protect customer and employee data, Fortinet has a database security solution that addresses this auditor requirement is a cost effective, quick time to benefit solution. When you (CIO) have the year end audit I bet you have serious diruptio0n to how your shop operates, they requite lots of data and I am guessing quite a lot of this paper based. We have a database security solution that can significantly help by automation many of the manual process which will save disruption to your shop and save money on external auditor hours as an automated IT internal control will undergo less scrutiny than a manually based system ? How many employee records do you have in your HR data base? Did you know that the Berkley law school estimate