Users of all types interact with a database, and each kind of user poses different and specific risks.  Gartner believes that database developers, system administrators, and system analyst post the greatest threats, because “these technically skilled individuals often have the ability to access or change systems that are in live production, which can result in poor performance, system crashes and, in some cases, security vulnerabilities.”

Companies need to be concerned about access to live production systems, according to Gartner, who recommends that access to these environments be conducted only via standard user accounts.  But, the analyst firm claims, many users of this type frequently violate this rule by using two accounts.  The risks associated with this include system instability and a higher potential for crashes, as well as ineffective permission control which could result in unauthorized access to sensitive or confidential information.

A comprehensive, next-generation database change management environment, like dbMaestro TeamWork™, is the ideal solution for this potential problem.  By incorporating locking functionality directly into the database itself, TeamWork delivers maximum security that cannot be bypassed under any circumstances.  No matter what type of connection is used, which program is being utilized to retrieve the information, or who is attempting to update the data, TeamWork can help provide greater control over access to live production systems.

Want to learn about other areas of database administration that need to be carefully tracked?  Read our past posts on changes to database information, use of unapproved channels by privileged users, modification of database schemas, addition or alteration of user accounts, and retrieval of data via unauthorized channels.

When it comes to database security, it is not only the actions of DBAs and super-users that must be watched.  Companies must also closely monitor how end users leverage the database.  This is particularly important when it comes to the retrieval of the data contained within that repository.

Gartner is particularly concerned about end users who access data through inappropriate or unapproved channels.  The analyst states that, “This problem is similar to that for privileged users, but the risk is somewhat different. End users sometimes access data directly, without using the approved applications or channels. They sometimes do this simply for convenience. But the result may be undetected changes to data that seriously impacts availability and data integrity.”

What do they recommend?  That organizations implement “detective security measures to determine whether end users are trying to bypass proper channels”.  For example, are end users attempting to go directly to the database, to either view, add, or alter database information, without going through existing application-level controls?

dbMaestro TeamWork™ can help.  As we discussed in prior posts, our powerful database version control solution includes a unique locking capability that it an inherent part of the database itself, so it cannot be overridden or bypassed in any way.  Therefore, it can optimize security by capturing details about how data is retrieved or altered, regardless of the connection type, the application, or the client.

Refer to earlier posts in the series, where we highlighted other areas of database administration that need to be closely monitored, including changes to database information, use of unapproved channels by privileged users, modification of database schemas, and addition or alteration of user accounts.

While the majority of database administrators and other privileged users are good, honest professionals, a company still needs to protect itself.  For example, according to Gartner, “a DBA or other privileged user who knows his own activities are audited and logged could create an account in a fictitious name, use a dormant account, or change a valid account to give it higher levels of access. The new or altered account could then be used to access or change data, and then be deleted so that no one knows the inappropriate activity has taken place.”

Techniques like these are no secret to savvy DBAs, who are well aware of the potential security access holes in today’s RDBMS systems.  Businesses need to watch closely, and put the appropriate mechanisms in place, to ensure the proactive prevention of breaches, identity theft, and similar problems.

But, in order to perform the proper monitoring, companies need a solution that seamlessly integrates with the database engine, so it cannot be bypassed in any way.  This will ensure that all update activities are always captured, regardless of which user account is being utilized to make the changes.

dbMaestro TeamWork™ is a robust, next-generation Oracle database change management solution that provides a powerful locking facility.  Because this locking feature is not affected by the level of security permission of the user making the alterations, it can capture any change, made by any user.  Therefore, inappropriate or unauthorized actions are always immediately detected, before they create problems with database performance.

Read our previous posts to learn more about other areas of database administration that need to be closely monitored, including changes to database information, use of unapproved channels, and modification of database schemas.