The document discusses a solution brief from Imperva and Vormetric that combines Imperva's database activity monitoring capabilities with Vormetric's data encryption to provide comprehensive database security. The integrated solution monitors and controls access for both privileged and non-privileged users across heterogeneous database environments, while encrypting sensitive data. This layered approach helps customers meet a variety of compliance requirements and defend against both internal and external threats to sensitive database information.

1. SOLUTION
BRIEF
Imperva and Vormetric

2. SOLUTION BRIEF
2
Integration Benefits
• Robust Security: Ensures
privileged users inside
and outside of the
database do not have
access to sensitive data.
• Transparent: Requires no
changes to applications,
databases, or storage
environments. Has a near
zero performance impact
and does not disrupt
business operations.
• Manageable: Minimizes
costs and maximizes
ROI by protecting and
auditing heterogeneous
database environments.
• Quick: Deploys rapidly,
without disturbing
existing environments.
Database Activity Monitoring
and Encryption Provide a Layered
Defense to Protect Databases
Real-time database activity monitoring and encryption are essential ingredients for
preventing data theft, maintaining data integrity, and meeting privacy and security
mandates required by customers, regulators, and lawmakers. Imperva and Vormetric have
teamed together to deliver a solution that encrypts sensitive data and continuously audits
and monitors database and database file access by privileged and non-privileged users.
Deploy Robust, Layered Defenses
Imperva and Vormetric enable a comprehensive solution that helps organizations
protect databases through a combination of database activity monitoring and encryption
capabilities. Imperva SecureSphere provides full auditing and visibility into database
usage across heterogeneous database platforms, while Vormetric Encryption secures
and controls access to database information from users who work at the operating
system and storage tiers. With this combination, organizations can monitor and control
users both inside and outside of the database.
Meet Regulatory Compliance
Enterprises often struggle to attain compliance with industry regulations such as PCI
DSS, SOX, HIPAA/HITECH, and with national or regional data privacy laws such as the
EU Data Protection laws. These regulations, mandates, and privacy directives require
activity audit and security controls to protect databases in scope. Imperva SecureSphere
and Vormetric Encryption help meet these requirements with data discovery and
classification, vulnerability assessments, encryption, database auditing and security,
privileged user monitoring, and access rights analysis capabilities.
Protect the Cloud and Virtual Environments
The popularity of virtualized environments and private clouds pose new challenges for
securing data. Some of these challenges include mixed trust levels, the potential for
weakened separation of duties enforcement, and data governance. Enterprises who
want to leverage these environments need the assurance that they can meet compliance
requirements and minimize the risk of a data breach. To identify, prioritize, and mitigate
risks across a varied infrastructure, organizations require a layer of security positioned
close to the data. Imperva SecureSphere and Vormetric Encryption can be deployed to
protect heterogeneous data centers across physical, virtual, and cloud environments.
Together, Imperva and Vormetric deliver a comprehensive
security solution that meets compliance requirements, prevents
data theft, strengthens data privacy, and minimizes the
cost of securing heterogeneous enterprise data centers in
on-premise, virtual and cloud environments.

3. SOLUTION BRIEF
imperva.com
© 2012, Imperva, Inc. All rights reserved. Imperva, the Imperva logo, SecureSphere, Incapsula and Skyfence are
trademarks of Imperva, Inc. and its subsidiaries. All other brand or product names are trademarks or registered
trademarks of their respective holders. IMPV-SB-Imperva-Vormetric-0116-v1
Drivers for Database Security
• Compliance—PCI DSS, HIPAA/HITECH, State Data Breach Laws, National Data
Protection Laws
• Security mandates
• Contractual obligations
Typical Database Threats
• Unauthorized Database Access
—— Accessing data that is off-limits
—— Attempts to exploit a vulnerability
• Unusual Database Access
—— High velocity & high volume queries
—— Atypical table access; from different locations, IP’s, applications, etc.
• Unauthorized System Access
—— Database files; backups, log files, ETL data, etc.
—— Unauthorized Insiders
—— Unauthorized Outsiders (hackers)
About Vormetric
Vormetric Encryption provides data protection, access control, and transparent
encryption of structured (database) and unstructured data in physical, virtual and cloud
environments. Vormetric Encryption provides integrated encryption key management
while Vormetric Key Management manages keys for internal database Transparent Data
Encryption. Vormetric secures against external threats (hackers with user credentials) and
manages data access for internal users (IT admins, etc).
About Imperva
Imperva is a pioneer and leader of a new category of business security solution that
protects critical applications and data from theft, insider abuse, and fraud; and also
streamlines regulatory compliance. We provide a comprehensive solution for monitoring
and controlling all data usage and business transactions across the data center, from
storage in a database or on a file server to consumption through applications.
Imperva and Vormetric
protect databases through
a unique combination of
database monitoring and
encryption applied to all tiers
of the database stack.
Application Tier
Data Tier
Server Tier
Storage Tier
Data
Security
Layers of
Defense
Network
Security
Layers of
Defense
Firewall
IDS/IPS
Content Filtering
DLP
IAM
Internet
Applications
Database
Operating System
Data