This document discusses IBM InfoSphere Guardium, an enterprise database protection and compliance solution. It provides real-time monitoring of database activity to detect threats and policy violations. InfoSphere Guardium collects data from database logs without impacting performance. It generates auditing reports, alerts, and remediates issues to help meet regulatory requirements. The solution scales across database types and can be integrated with other security tools.

1. Information Management
© 2010 IBM Corporation
IBM InfoSphere Guardium
Enterprise-wide Database Protection and Compliance

2. Download this slide
http://ouo.io/836HS

3. “ASlthQoLuginhjemcuticohnapnlagyset danadrsoelecuinrity
7f9u%ndoinfgreiscogirvdesnctoom…p.rmomobisileed
devices and deunrdin-ugser systems,
these a2s0s0e9tsbarereacshimesply not
a major point of compromise.”
Database Servers Are The Primary Source of Breached Data
2010 Data Breach Report from Verizon Business RISK Team
http://www.verizonbusiness.com/resources/reports/rp_2010-data-breach-report_en_xg.pdf
… up from 75% in 2009 Report
© 2010 IBM Corporation
Source of Breached Records

4. Information Management
Perimeter defenses no longer sufficient
A fortress mentality will not work in cyber. We cannot retreat
behind a Maginot Line of firewalls.
-- William J. Lynn III, U.S. Deputy Defense Secretary
Insiders
(DBAs, developers,
outsourcers, etc.)
Outsourcing
Web-Facing Apps
Employee Self-Service,
Partners & Suppliers
Stolen Credentials
(Zeus, etc.)
© 2010 IBM Corporation

5. Information Management
Typical home-grown solutions are costly and ineffective
Create
reports
Manual
review
Manual
remediation
dispatch
and tracking
Significant labor cost to review data and maintain process
High performance impact on DBMS from native logging
Not real time
Does not meet auditor requirements for Separation of Duties
Audit trail is not secure
Inconsistent policies enterprise-wide
Native
Database
Logging
Native
Database
Logging Pearl/Unix Scripts/C++
Scrape and parse the data
Move to central repository
Native
Database
Logging
Native
Database
Logging
© 2010 IBM Corporation

6. Information Management
InfoSphere Guardium continues to demonstrate
its leadership …
2011
Source: The Forrester Wave™: Database Auditing And Real-Time Protection, Q2 2011, May 6, 2011. The Forrester Wave is copyrighted by Forrester Research, Inc. Forrester
and Forrester Wave are trademarks of Forrester Research, Inc. The Forrester Wave is a graphical representation of Forrester's call on a market and is plotted using a detailed
spreadsheet with exposed scores, weightings, and comments. Forrester does not endorse any vendor, product, or service depicted in the Forrester Wave. Information is based
© 2010 IBM Corporationon best available resources. Opinions reflect judgment at the time and are subject to change.

7. IBM Security Solutions
What We Offer?
Database User Activity Monitoring
- Auditing and reporting
- Enforcing database user access
- Prevention (blocking)
Data Privacy
- Masking non-production data
- Encryption for production data
- Redaction for documents
Vulnerability Assessment
© 2011 IBM Corporation
6

8. Information Management
Collector
Real time database monitoring and protection with InfoSphere
Guardium
No DBMS or application changes
Does not rely on DBMS-resident logs that can
easily be erased by attackers, rogue insiders
100% visibility including local DBA access
Minimal performance impact
Cross-DBMS solution
Granular, real-time policies & auditing
–Who, what, when, how
Automated compliance reporting, sign-
offs and escalations (financial
regulations, PCI DSS, data privacy
regulations, etc.)
Host-based
Probes (S-TAPs)
© 2010 IBM Corporation

9. Information Management
© 2010 IBM Corporation

10. Information Management
© 2010 IBM Corporation
IBM InfoSphere Guardium
Architecture

11. Information Management
© 2010 IBM Corporation

12. IBM Security Solutions
Scalable Multi-Tier Architecture
Integration with LDAP,
IAM, SIEM, IBM TSM,
BMC Remedy, …
Oracle on
Linux for
System z
© 2011 IBM Corporation

13. IBM Security Solutions
© 2011 IBM Corporation

14. IBM Security Solutions
© 2011 IBM Corporation

15. IBM Security Solutions
© 2011 IBM Corporation

16. IBM Security Solutions
© 2011 IBM Corporation

17. IBM Security Solutions
© 2011 IBM Corporation

18. IBM Security Solutions
© 2011 IBM Corporation

19. IBM Security Solutions
© 2011 IBM Corporation

20. IBM Security Solutions
© 2011 IBM Corporation

21. IBM Security Solutions
© 2011 IBM Corporation

22. IBM Security Solutions
© 2011 IBM Corporation

23. Information Management
© 2010 IBM Corporation
IBM InfoSphere Guardium
Installation

24. Information Management
© 2010 IBM Corporation

25. Information Management
© 2010 IBM Corporation

26. Information Management
© 2010 IBM Corporation

27. Information Management
© 2010 IBM Corporation
IBM InfoSphere Guardium
Data Base Auto Discovery (DBAD)

28. © 2011 IBM Corporation
IBM Security Solutions

29. IBM Security Solutions
© 2011 IBM Corporation

30. Information Management
© 2010 IBM Corporation
IBM InfoSphere Guardium
Security Policy & Reporting

31. IBM Security Solutions
© 2011 IBM Corporation

32. IBM Security Solutions
© 2011 IBM Corporation

33. IBM Security Solutions
© 2011 IBM Corporation

34. IBM Security Solutions
© 2011 IBM Corporation

35. IBM Security Solutions
© 2011 IBM Corporation

36. IBM Security Solutions
© 2011 IBM Corporation

37. IBM Security Solutions
© 2011 IBM Corporation

38. Information Management
© 2010 IBM Corporation
IBM InfoSphere Guardium
Classifier

39. IBM Security Solutions
© 2011 IBM Corporation

40. IBM Security Solutions
© 2011 IBM Corporation

41. IBM Security Solutions
© 2011 IBM Corporation

42. Information Management
© 2010 IBM Corporation
IBM InfoSphere Guardium
Real Time & Correlation Alerts

43. © 2011 IBM Corporation
IBM Security Solutions

44. © 2011 IBM Corporation
IBM Security Solutions

45. IBM Security Solutions
© 2011 IBM Corporation

46. Information Management
© 2010 IBM Corporation
IBM InfoSphere Guardium
S-GATE

47. © 2010 IBM Corporation

48. © 2010 IBM Corporation

49. © 2010 IBM Corporation

50. © 2010 IBM Corporation

51. © 2010 IBM Corporation

52. Information Management
© 2010 IBM Corporation
IBM InfoSphere Guardium
Quarantine & Redact

53. © 2010 IBM Corporation

54. © 2010 IBM Corporation

55. © 2010 IBM Corporation

56. © 2010 IBM Corporation

57. © 2010 IBM Corporation

58. Information Management
© 2010 IBM Corporation
IBM InfoSphere Guardium
Configuration Audit System (CAS)

59. © 2010 IBM Corporation

60. IBM Security Solutions
© 2011 IBM Corporation

61. © 2010 IBM Corporation

62. © 2010 IBM Corporation

63. © 2010 IBM Corporation

64. Information Management
© 2010 IBM Corporation
IBM InfoSphere Guardium
Vulnerability Assesment

65. © 2010 IBM Corporation

66. © 2010 IBM Corporation

67. Information Management
© 2010 IBM Corporation
IBM InfoSphere Guardium
Entitlement Reports

68. © 2010 IBM Corporation

69. © 2010 IBM Corporation

70. Information Management
© 2010 IBM Corporation
IBM InfoSphere Guardium
Application User Identification

71. © 2010 IBM Corporation

72. © 2010 IBM Corporation

73. © 2010 IBM Corporation

74. © 2010 IBM Corporation

75. © 2010 IBM Corporation

76. © 2010 IBM Corporation

77. Information Management
© 2010 IBM Corporation
IBM InfoSphere Guardium
Paldies par uzmanību!