Database Vulnerability Assessment
The first step to secure confidential database data is to understand where it resides. Imperva has developed solutions that can automatically discover databases, sensitive data, and identify vulnerabilities. Imperva’s solutions classify database data according to sensitivity based on pre-defined credit card, social security number, bank account number identifiers and custom data types. Once discovered and classified, Imperva solutions can then assess databases for configuration flaws and vulnerabilities.
Data and Server Discovery Capabilities:
- Network discovery of known and rogue databases
- Data classification based on pre-defined and custom data type
- Classification determines which database tables and rows are in scope of SOX, PCI, and HIPAA compliance initiatives
- Pre-built knowledge of enterprise applications such as Oracle E-Business Suite, SAP and PeopleSoft enables accurate identification of financial and customer data
- Exportable inventory of databases and data classification
Vulnerability Assessment Capabilities:
- Comprehensive assessment of platform, software, and configuration vulnerabilities
- One-time or scheduled database scans to document changes
- Risk scoring based on data classification and found vulnerabilities
- Data Risk Explorer offers a dynamic graphical dashboard of vulnerabilities and risk levels
- Graphical summary reports provide high-level security status while detailed assessment reports show individual vulnerability results and remediation steps
Data Usage Assessment:
- Detailed and up-to-date user activity profile based on patent-pending Dynamic Profiling technology
- Usage assessment detects violations to corporate policies such as multiple users sharing a single database account