Re: Your Expert Advice

The database could have auditing enabled and the DBA could be auditing that specific table for changes. If that was the case, then the DBA could easily determine the database username, the Operating System username, the terminal that the user did the change from, the timestamp the change occured, the object affected.

HTH,
Brian

novelist wrote:
>
> Greetings,
>
> I'm a high tech journalist who is working on a novel. A
> key part of the plot is discovering a hack job and perhaps
> one of you experts could help.
>
> The scenario is doctor has hired a hacker to replace his ID
> in the name field of a specific patient with someone
> elses. The hacker is an IT manager who's willing to break
> the rules for a few extra bucks, but he forgets that his
> password and login can be traced.
>
> Now, the real question is if electronic patient records
> contain several fields, how could one prove that a specific
> person altered a specific field on a specific date? So far
> I've been told by software engineers that you'd only see a
> change in the timestamp, in which case you couldn't prove
> specifically what happened.
>
> I can't believe that's the real answer. Could someone who
> knows the answer please tell me what it is?
>
> Many thanks.
>
> * Sent from AltaVista http://www.altavista.com Where you can also find related Web Pages, Images, Audios, Videos, News, and Shopping. Smart is Beautiful
Received on Thu Jan 13 2000 - 09:03:35 CST