Securing your Databases with Infosphere Guardium
This section talks about the four major aspects of IBM cloud computing as shown in the image on the previous page.
Find and Classify
IBM says if you use Infosphere Guardium , you get resources that help you research and classify information into different data types. It enforces security policies according to the classification of data to make sure that only authorized people can access the data. The database is checked on a regular basis to make sure that all the data is indexed and no data is left out.
Monitor and Enforce
Infosphere Guardium offers you with real time policies that help you in tracing and avoiding unapproved or suspicious activities. These policies are effective for both internal users and external hackers. These policies also track the different applications that access the databases to make sure that no application or the person using the application is trying to access data that the application or user is not authorized to view. These processes eliminate the need of Database Admins (DBA). IBM emphasizes on the term - real time - when referring to these processes and policies.
Audit and Report
Infosphere Guardium offers a real time, regular log of all database activities that can be analyzed and filtered to produce the information required by auditors. These reports help in assessing the security and performance of the databases. For example, one can trace attempts from an unknown user, or an unapproved application to access data. Based on these log files, one can take action as required. The Infosphere Guardium also has a rich set of 150 templates for your reporting needs. In addition to these, it offers the capability to produce custom designed reports using a drag and drop interface.
Assess and Harden
One of the major benefits of using Infosphere Guardium is that it contains a module that continuously scans the entire database for vulnerabilities. This is useful as every database, be it on a local server or on cloud, is open to threats in some way or the other. The Infosphere Guardium process not only scans using a set of industry standard rules, it also offers recommendations to further strengthen the database on the IBM cloud.
♦Image Courtesy: IBM Whitepaper on Infosphere Guardium.
This was a collection of important points from the IBM cloud computing whitepaper. If you wish to know more, please feel free to leave a comment below for more details. Also comment if you wish to share your experience with IBM cloud computing - whether or not related to Infosphere Guardium.