RE: IDS for DataBase Systems.

PentaSafe has a nice product suite that monitors databases (SQL, Oracle, and Sybase) on many different platform OS's. The product analyzes, monitors, and audits.

-----Original Message-----
From: Ralph Los [mailto:RLos@enteredge.com] Sent: Friday, November 15, 2002 11:13 AM To: 'Galappatti, Kishantha'; 'Hemant Ramnani'; focus-ids@securityfocus.com Cc: Hemant Ramnani
Subject: RE: IDS for DataBase Systems.

Yes - but that's a scanner, I think what we're looking for is an intrusion detection system. ISS's Database Scanner is a vulnerability scanning tool (and believe me, there are much better out there) - and not an DB_IDS.

I'm not aware of any Database-Type IDSes, perhaps we could start a development effort to write one? It would essentially be a compilation (for MS SQL anyway) of Triggers, SP's, etc if I'm guessing right. Log scanning, 'anomaly detection', all very important.

Cheers,
  Ralph

::: -----Original Message-----
Received on Mon Nov 18 02:13:00 2002