DataSunrise Database & Data Security and Compliance for Amazon S3

Database Activity Monitoring

DataSunrise Database Activity Monitoring enables real-time tracking of user actions and changes made to databases to ensure compliance-ready environment and increased visibility into activity across multiple data silos. DataSunrise is able to audit not only database user activity but also application users when applications (such as SAP, Salesforce, Siebel, Workday or others) are connected to the database with a single database user. The comprehensive interface and flexible rules make it easy to define monitoring policies for separate database objects.

This feature is not supported in Amazon S3

Database Security

Data Protection module is the primary tool defending corporate databases against hostile and negligent actions and preventing both external and insider attacks in the cloud or on premises.

This feature is not supported in Amazon S3>

Dynamic Masking

Real-time role based data masking of production data. Prevents exposure of sensitive data in production databases; requires neither application modifications, nor duplicating of the source database. The actual data in source database remains intact.

This feature is not supported in Amazon S3

Static Masking

Secures sensitive data in development and testing environments; completely eliminates the possibility to reverse engineer the masked data or access the original sensitive records.

This feature is not supported in Amazon S3

Data Discovery

Allows companies to accurately detect where sensitive and confidential data resides across the organization to ensure on-going compliance and effectively enforce monitoring and security policies.

This feature is not supported in Amazon S3

Authentication Proxy

Database-as-a-Service platforms provide access to the database without the need for implementing physical hardware and installing software. Many organizations choose cloud databases due to their scalability, advantageous pricing, and rapid provisioning. However, there are some essential issues that could dissuade them from using DBaaS. Cloud database providers are responsible for the security of data stored on hosted databases but they cannot protect against impersonation and account hijacking attacks.

This feature is not supported in Amazon S3

Kerberos Authentication

Named after three-headed hound guarding the gates of Hades in Ancient Greek myths, Kerberos protocol provides secure authentication service for computer networks. It performs mutual authentication between the user and the server with help of trusted third-party Key Distribution Center (KDC) that provides authentication and ticket granting service. All major operating systems, including Microsoft Windows, Linux, Apple OS X and FreeBSD, support Kerberos protocol. Kerberos protocol messages are protected against replay attacks and eavesdropping by means of shared secret cryptography.

This feature is not supported in Amazon S3

Sniffer

While running in this mode, DataSunrise acts as a traffic analyzer: it logs all database events. In this configuration, DataSunrise can not interfere database traffic, so it is able to perform only data auditing functions. Running DataSunrise in sniffer mode does not require any additional tweaking of databases or client applications.

This feature is not supported in Amazon S3

Sniffing of Encrypted Traffic

DataSunrise Database Activity Monitoring enables real-time tracking of user actions and changes made to databases to ensure compliance-ready environment and increased visibility into activity across multiple data silos. DataSunrise is able to audit not only database user activity but also application users when applications (such as SAP, Salesforce, Siebel, Workday or others) are connected to the database with a single database user. The comprehensive interface and flexible rules make it easy to define monitoring policies for separate database objects.

This feature is not supported in Amazon S3