Re: DB Auditing & Intrusion Testing Tools

Hi!

Check www.petefinnigan.com , I think he has made a simple security scanner for Oracle, which is a good starting point. But of course, to be comfortable with audit results, one should always audit the underlying layers such are OS, network, SAN, etc.. as well.

Tanel.

"Sybrand Bakker" <gooiditweg_at_sybrandb.demon.nl> wrote in message news:hkuqhvca2k67vgp4n7nn8nk00kq4h48dd6_at_4ax.com...
> On 22 Jul 2003 09:13:57 -0700, gd.moffitt_at_verizon.net (Glen Moffitt)
> wrote:
>
> >We're reviewing our needs for an Auditing and Intrusion testing and
> >detection toolset for both Oracle and MS SQL systems. The focus would
> >be on 1) auditing system and object rights for users, 2) monitoring of
> >access and changes to DB objects & 3) Providing good tools (reports,
> >etc) that assist in reviewing the data collected.
> >
> >Can anyone recommend a company or product? Any rants and raves? This
> >would be for a small-medium enterprise, 20-30 SQL Server instances and
> >3-5 Oracle 8i instances.
> >
> >Thanks!
>
>
> Just read up on the AUDIT command in your documentation before you
> start to throw away dollars.
>
>
> Sybrand Bakker, Senior Oracle DBA
>
> To reply remove -verwijderdit from my e-mail address
Received on Tue Jul 22 2003 - 14:30:12 CDT