Imperva SecureSphere - Data Security Suite

Overview:

The SecureSphere Data Security Suite delivers a complete lifecycle for Web application and database security in a single platform. By securing transactions from the end user through the Web application to the database, the SecureSphere Data Security Suite offers complete data security and visibility. SecureSphere can identify the unique application users that performed database queries—even in multi-tier environments. This Universal User Tracking capability provides user accountability to database audit trails and compliance reports.

As the premier SecureSphere Suite it combines the power of the Web Application Firewall, the visibility of the Database Activity Monitoring and the vulnerability tests of the Discovery and Assessment Server. The Data Security Suite provides complete visibility into application data usage and more accurate protection against a large variety of sophisticated attacks.

Benefits:

• Complete Application and Database Security Suite to secure databases and the applications that use them
• Accurately protects against sophisticated attacks such as SQL Injection, Cross Site Scripting and database protocol manipulation
• Tracks application users to database transactions, even for pooled connections
• Streamlines auditing and compliance with automated data collection and analysis and a powerful compliance reporting engine
• Scales to support large, distributed environments with centralized management

Features:

• Fully Integrated Data Security Suite – The Data Security Suite is the complete integrated package of the other SecureSphere product lines- Web Application Firewall, Discovery and Assessment Server, Database Activity Monitoring, and Database Firewall.
   
• Accurate Protection against Web application and Database Attacks – SecureSphere detects multiple types of security violations, including unexpected application or database requests, known (signature-based)attacks, privilege abuse, protocol violations, and session exploits.
   
• Complete Visibility – From the database to the application end user, the SecureSphere Data Security Suite can monitor and track the full transaction. SecureSphere audits all types of activities, including all types of SQL operations and local, privileged access by DBAs. Supporting heterogeneous database deployments, SecureSphere is the clear choice for data auditing, monitoring and forensics.
   
• User Accountability – The SecureSphere Data Security Suite makes individual users accountable even when user connections are pooled by an application server. Imperva’s innovative Universal User Tracking capability offers four different user tracking mechanisms to correctly identify end users regardless of how the users authenticate and access the database.
   
• Discovery and Assessment – SecureSphere offers server and sensitive data discovery, configuration assessment, and behavior assessment. SecureSphere enables organizations to identify and prioritize risks, mitigate vulnerabilities, and document compliance.
   
• Data Leak Prevention – SecureSphere detects and can optionally block sensitive data leaks, such as credit card and social security numbers, from Web applications and databases.
   
• Automated, Intuitive Management – Imperva’s unique Dynamic Profiling technology automatically learns the structure, elements, and expected usage of protected applications and databases.
   
• Enterprise-grade Centralized Management – Scaling to protect large, distributed data centers, the MX Management Server centralizes the configuration, monitoring and reporting of multiple appliances.
   
• Integrated Risk Management – Includes innovative Risk Dashboard to visualize and prioritize data security activities based on risk.
   
• Business Relevant Reporting – SecureSphere includes a powerful reporting framework with both pre-defined and fully-customizable reports that offers instant visibility for security and compliance requirements.

Solutions:

Trusted Leader in Data Security

With the only solution in the world that protects data from the database, through the application, to the end user, Imperva understands that Web and database security together are designed to achieve one ultimate goal: to safeguard sensitive data.

Combining the security of the SecureSphere Web Application and Database Firewalls, the visibility of Database Activity Monitoring, and the vulnerability management of the Discovery and Assessment Server, the SecureSphere Data Security Suite provides a comprehensive risk management framework to assess, audit and protect the most critical assets in any organization: the database and the business applications that use them.

User Accountability
By unifying Web and database activity monitoring, SecureSphere solves a key requirement for audit and compliance: identifying application end users that performed database transactions, even in multi-tier environments.

SecureSphere’s Universal User Tracking discovers application IDs, monitors user sessions and correlates those sessions with specific database transactions. SecureSphere accurately associates application users with SQL queries, enforcing user accountability as mandated by compliance regulations.

Complete Visibility and Control
By providing an integrated solution, organizations gain unmatched insight, accurate identification of end users, and correlation of application and database activity. SecureSphere is the clear choice to assess, monitor and protect sensitive data.

Discovery and Assessment Server

The SecureSphere Data Security Suite includes the Discovery and Assessment Server, which discovers database servers, classifies database data based on sensitivity level, and assesses databases for vulnerabilities.

To assess organizations’ security and compliance posture, SecureSphere scans databases for over 500 software vulnerabilities, configuration flaws, privilege errors, and compliance violations.

All assessment results are presented in easy to understand reports that prioritize risk, support targeted corrective action, and document compliance status.

Database Activity Monitoring

SecureSphere delivers automated and scalable activity monitoring, auditing, and reporting for Oracle, MS-SQL, DB2, Informix, MySQL, Sybase, and SybaseIQ. SecureSphere tracks SQL transactions for forensics, prevents database leaks, and ensures data integrity by establishing an independent audit trail of user activity.

Detailed Activity Monitoring
SecureSphere captures all database actions, including DML, DDL, DCL and read-only activity, as well as changes made to store procedures, triggers, and database objects, ensuring complete audit trails of database activity.

Audit Analytics and Compliance Reports
Visibility into audited activities enables non-technical auditors to analyze, correlate, and view database activity with just a few mouse clicks, uncovering the patterns and trends that indicate security risks. SecureSphere provides both fullycustomizable and “out-of-the-box” reports for security and compliance.

Zero Impact on Performance
Unlike native database logging or software auditing, SecureSphere imposes no impact on database or application performance.

Database Firewall

Building on the visibility provided by Database Activity Monitoring, the SecureSphere Database Firewall provides real-time protection to prevent database intrusions, fraud, and sensitive data loss.

Web Application Firewall

The SecureSphere Data Security Suite leverages the power of the market-leading SecureSphere Web Application Firewall to protect applications against sophisticated attacks. SecureSphere accurately blocks SQL injection, Cross-Site Scripting (XSS) and brute force login, stops online identity theft, and prevents data leaks from applications.

Automated Security
SecureSphere’s unique Dynamic Profiling technology automatically learns the structure, elements and usage of protected Web applications. By comparing transactions to the profile, SecureSphere detects malicious activity with pinpoint precision.

Unparalleled Accuracy
SecureSphere performs multiple layers of inspection, detecting:

• Usage violations by Dynamic Profiling
• Application attack signatures
• HTTP protocol violations
• Network and platform attacks
• Web services (XML) attacks
• Session exploits
• Data leakage signatures

With transparent deployment, automated and up-to-date security, and low operational overhead, SecureSphere is the only choice to protect critical applications and databases.

Addressing the Full Data Security and Compliance Life Cycle

With an increasing number of industry and government regulations, businesses must implement a repeatable process that addresses data governance and data protection. The SecureSphere Data Security Suite empowers organizations to establish a successful framework for security and standards compliance.

Because many regulations are vague and subject to interpretation, organizations have wasted valuable time and expense coordinating separate compliance initiatives. However, even though the number of regulatory mandates is escalating, more and more regulations present common themes.

Imperva has outlined an actionable set of steps that helps organizations meet many of the regulatory requirements that oversee data governance and data protection.

This iterative compliance framework comprises the following four steps:

1. Discover and Assess
2. Set Policies and Controls
3. Monitor and Enforce
4. Measure

Using this framework, organizations can satisfy compliance requirements, as well as align business objectives, implement controls, and ensure robust security.

Features and Appliance Specifications:

 

¹ Database agents only included with SecureSphere Database Activity Monitoring, Database Firewall, and Data Security Suite.
² Database assessments only included with Discovery and Assessment Server, Database Activity Monitoring, Database Firewall, and Data Security Suite. (and Discovery and Assessment Server for X2000 and X1000)

View Demo:

 

Documentation:

Download the Imperva SecureSphere Data Security Suite Datasheet (PDF).