Database Security Articles
Organizations rely heavily on SAP systems and applications to run crucial business processes; securing these systems against cyber-attacks is vital. While several cybersecurity frameworks exist to manage cyber risks, they use generic wording that is hard to apply to application security and lack specific guidance to cover SAP environments. As a result, organizations must select the right frameworks to enhance their security posture and streamline complex security operations to safeguard critical assets from attacks.
Posted March 09, 2023
Entrinsik is releasing Informer 5.7, adding a new user interface that simplifies Informer with intuitive ways to navigate, design, and utilize the tool from the home screen. Also, Informer 5.7 features an enhanced workflow which has been redesigned to feel natural and provide a consistent experience, increasing the ease and effectiveness of accessing, analyzing, sharing, and automating data.
Posted March 09, 2023
A long, long time ago—in the early 90s—I first worked as a DBA with responsibility for enterprise databases. I will never forget how surprised and disappointed I was to discover that the data in the database files were completely unencrypted. A system administrator with access to the database files could read the data in those files, even if they didn't have a database username and password.
Posted March 09, 2023
Across database structures, dates are ubiquitous: sales date; order date; shipment date; receipt date; created date; last updated date. You might think that with such an abundant presence, dates would be well understood. Sadly, dates hide in the shadows—and many are confused over how dates work. People run a query, get a result, and seem to expect that what one sees, is what one gets. If they see a two-digit year, they believe that is exactly how the data is stored.
Posted March 09, 2023
This month, I want to take a higher-level view of database performance concepts and introduce a few themes that will likely follow you throughout your career working with database systems and applications. These themes should be viewed as guiding principles to keep in mind when confronted with database performance issues.
Posted March 09, 2023
Logpoint is releasing AgentX, an endpoint agent for Windows, Linux, MacOS, and Cloud deployments that accelerates threat detection and investigation on endpoints to ensure fast response capabilities. According to the company, in addition to gathering telemetry, AgentX adds interrogation, compliance checks, and vulnerability management capabilities to Logpoint's security operations platform, converging SIEM, SOAR, and UEBA technologies, to improve overall security posture significantly.
Posted March 08, 2023
Fluree, provider of a graph ledger database and data pipeline toolset for secure-data management and sharing, is partnering with Fabric to remove "middleman" companies, such as Facebook and Google, that currently collect consumer data and sell it to advertisers without express permission of the individuals in question.
Posted March 08, 2023
Sometime during the pandemic, I stopped carrying a wallet when leaving the house. Almost all shops supported—often insisted on—touchless payments, so there was no need to carry around paper money, and since my phone was fully able to perform touchless payments, my phone became all I needed to navigate the commercial world. I'm sure most of you have had a similar experience.
Posted March 08, 2023
Rubrik, the Zero Trust Data Security Company, is introducing the Rubrik Transform Partner Program to empower partners to become trusted data security advisors and help improve the cyber readiness, resilience, and recovery for their customers. Rubrik Transform leverages a points-based scoring system and customizable incentive plan to reward top-performing partners, equipping them with important resources to win in the ongoing battle against modern cyber threats, according to the vendor.
Posted March 07, 2023
Palo Alto Networks, a global cybersecurity provider, is releasing its new Identity Threat Detection and Response (ITDR) module for Cortex XSIAM, enabling customers to ingest user identity and behavior data and deploy state of the art AI technology to detect identity-driven attacks. The module further strengthens XSIAM's ability to consolidate multiple security operations capabilities into a unified, AI-driven security operations center (SOC) platform, according to the vendor.
Posted March 07, 2023
Digibee, an enterprise integration platform as a service (eiPaaS) company, is partnering with Orasi, a DevSecOps innovator, joining Orasi's strong partner community that brings enterprise customers full development and delivery lifecycle support for market-driven products. Digibee will provide, through the Digibee Enterprise Integration Platform (eiPaaS), the ability to connect and integrate disparate legacy and cloud-based systems as part of Orasi's expert guidance, services, and tools that accelerate the maturation of secure, high quality applications.
Posted March 06, 2023
Ermetic, the cloud infrastructure security company, is offering automated capabilities that enable customers to discover and fix misconfigurations, compliance violations, and risky or excessive privileges in Kubernetes clusters through its Cloud Native Application Protection Platform (CNAPP).
Posted March 06, 2023
immudb, the immutable enterprise-scale database with cryptographic verification and unit of Codenotary, is announcing the release of new connectors that make data tamper-proof—essential for industries such as judicial, auditing, and forensic—which was an otherwise complex process until now, according to the vendor.
Posted March 06, 2023
Fivetran, the global leader in automated data movement, is releasing three new offerings that extend the Fivetran Data Movement Platform to give users options for all deployment types for secure, real-time, and high-volume database replication. Trusted by thousands of market-leading companies such as Autodesk, Conagra Brands, Lionsgate, Morgan Stanley and Ziff Davis, Fivetran's fully managed service helps companies power mission-critical workloads and drive data-informed business decisions.
Posted March 03, 2023
Dremio, the easy and open data lakehouse, is offering key new features to enable customers to create their data lakehouses more easily by performantly loading data into Apache Iceberg tables, query and federate across more data sources with Dremio Sonar, automatically format SQL queries in the Dremio SQL Runner, and securely connect Microsoft PowerBI using single sign-on (SSO).
Posted March 02, 2023
EnterpriseDB (EDB), the accelerator of Postgres in the enterprise, is launching EDB Postgres Distributed (PGD) 5.0, introducing extreme high availability for PostgreSQL—up to 99.999%+ availability via active-active technology, according to the vendor.
Posted March 01, 2023
Aptum, a hybrid multi-cloud managed service provider, is releasing its Multi-Tenant Cloud (MTC), a powerful virtual data center solution providing the ability to deploy virtual machines, virtual appliances, and other services in a multi-tenant environment using a consumption-based billing model. According to the company, Aptum's MTC was designed with today's businesses' needs in mind, regardless of their size.
Posted March 01, 2023
It's time to submit nominations for the annual Database Trends and Applications Readers' Choice Awards, a competition in which the winning information management solutions, products, and services are selected by you, the users. The nominations period has been extended through Wednesday, March 15, 2023, followed by actual voting on the products nominated by our readers.
Posted March 01, 2023
TigerGraph, provider of an advanced analytics and ML platform for connected data, is releasing the latest version (3.9) of TigerGraph Cloud, the native parallel graph database-as-a-service. TigerGraph Cloud 3.9 includes new security, advanced AI, and machine learning capabilities that meet the demands of its rapidly growing customer base and streamline the adoption, deployment, and management of the most scalable graph database platform, according to the company. The underlying parallel native graph database engine is also available for on-prem or self-managed cloud installation.
Posted March 01, 2023
Observability by definition is a measure of how well internal states of a system can be inferred from knowledge of its external outputs. In other words, a system's behavior is determined from its outputs—information obtained by certain measures. Though observability as a term has been used for many years, the modern understanding originates in software observability, which is the ability to collect data about program execution, internal states of modules, and communication between components.
Posted March 01, 2023
Talend, a provider of data integration and management, is making updates to Talend Data Fabric, its end-to-end platform for data discovery, transformation, governance, and sharing. In the Winter '23 release, Talend introduces advanced capabilities and enhancements to simplify and automate cloud migrations and data management, expand data connectivity, and improve data visibility, quality, control, and access.
Posted February 28, 2023
Quali is unveiling improvements to its end-to-end infrastructure automation and orchestration platform, Torque, revolving around security, risk mitigation for action and policy automation, as well as infrastructure health and efficiency.
Posted February 28, 2023
DBTA held a webinar, "Rethinking Data Management for Microservices and Cloud-Native Apps," to highlight a variety of modern data management approaches that will accommodate the world of cloud-native applications that form today's data-driven businesses.
Posted February 27, 2023
SolarWinds, a provider of secure IT management software, is expanding the global reach of its full-stack, software as a service (SaaS) SolarWinds Observability solution with the opening of a new data center in Europe. Located in Germany, the data center will allow more Amazon Web Services (AWS) customers to access SolarWinds Observability so they can manage highly complex hybrid and multi-cloud IT environments.
Posted February 27, 2023
IBM announced that it is committed to continuing to strategically invest in three operating environments on IBM Power: AIX, IBM i, and Linux. For example, IBM just rolled out the availability of Hyper Protect Crypto Services for AIX and Linux on Power Virtual Server.
Posted February 27, 2023
IBM Security released its annual X-Force Threat Intelligence Index, reporting that while ransomware's share of incidents declined only slightly (4%) from 2021 to 2022, defenders were more successful detecting and preventing ransomware. Despite this, attackers continued to innovate with the report showing the average time to complete a ransomware attack dropped from 2 months down to less than 4 days.
Posted February 27, 2023
A recent report by IBM found that workers are having difficulties pursuing roles related to science, technology, engineering, and mathematics (STEM) across different industries. At the same time, online training and digital credentials are emerging as a recognized pathway to opportunity as respondents plan to seek new jobs in the year ahead.
Posted February 27, 2023
Catalogic Software, a provider of smart data protection solutions, is providing a new bundled offering of its native back-up-as-a-service platform CloudCasa and Ondat, providing customers with a unified solution to run their stateful applications on Kubernetes. According to the vendors, this best-of-breed bundled offering from CloudCasa and Ondat is a cost-effective solution to address Kubernetes Day 2 challenges including storage and infrastructure management, data mobility across different environments, and backup and recovery for Kubernetes workloads.
Posted February 24, 2023
Lacework, the data-driven cloud security company, is releasing high-fidelity composite alerts on the Lacework Polygraph Platform, built to reduce cost and time expenditures of cloud security processes, as well as increase its effectiveness.
Posted February 24, 2023
Baffle, Inc. is releasing Baffle Multi-Tenant Data Security, making SaaS applications and their underlying databases even easier to protect with record-level encryption. According to the company, this solution ensures that any SaaS provider meets the most stringent privacy regulations and gives their customers complete protection and control of their data. As a result, the SaaS vendor gains a competitive advantage and the ability to monetize enhanced data security.
Posted February 23, 2023
While the emerging constellation of next-generation data architectures—fabric, mesh, and cloud—is extremely appealing, it's still full of unknowns. These approaches present opportunities for greater data democratization, but also increased complexity. Understanding the distinctions between data fabric and mesh are also important before moving to this architecture.
Posted February 23, 2023
Quest Software, a global systems management, data protection, and security software provider, announced the general availability of a reimagined KACE Cloud platform to transform endpoint management with automated patching for all devices in the cloud. Available now, this pioneering capability offers businesses an all-in-one solution beyond conventional patching with over 10,000 patches to over 350 third-party applications, including Adobe, Cisco, Google Chrome, and Slack.
Posted February 23, 2023
EnterpriseDB (EDB), accelerator of Postgres in the enterprise, is announcing the global availability of Transparent Data Encryption (TDE), enhancing Postgres' security and performance abilities where organizations struggle to meet compliance requirements.
Posted February 22, 2023
Hexaware Technologies is expanding its membership in the SAP PartnerEdge program to include the Sell track, with the goal of selling many SAP products, including RISE with SAP. This expansion is in addition to its existing participation in the Service track. Participation in the Sell track will help Hexaware accelerate the sales cycle and deliver more comprehensive SAP portfolio solutions, in a flexible model that will help transform business outcomes, according to the vendor.
Posted February 22, 2023
SAP and Red Hat, Inc., a provider of open source solutions, is expanding their partnership to significantly increase SAP's use of and support for Red Hat Enterprise Linux. This collaboration aims to enhance intelligent business operations, support cloud transformation across industries, and drive holistic IT innovation, according to the vendors.
Posted February 22, 2023
In 2023, companies will live and die by their data strategies. Massive increases in information generation, the cloud, and innovative technologies will be top of mind for database managers, all while an uncertain economy continually threatens budgets. For companies to build and maintain exciting applications that customers love while increasing the bottom line, they need to plan, adapt, and execute effective strategies for their data and databases.
Posted February 22, 2023
Though not completely post-Covid, 2023 looks to be an uncertain economic year due to a variety of factors. Businesses continue to deal with a new hybrid reality as employees work remotely or several days in the office, leading to increased security, tapping into the cloud, AI, and more. Some companies lost portions of their workforce or recruited new talent during this upheaval; others are searching for compatible workers.
Posted February 22, 2023
MinIO and Veeam are partnering to support Veeam Backup and Replication v12 features, simplifying backup architectures and operations. It is no longer necessary to maintain two separate storage platforms, one for each Veeam tier. Users don't need anything other than a single MinIO deployment to support Veeam and storage architecture is flattened, with system maintenance becoming easier.
Posted February 17, 2023
Fiddler, a provider of Model Performance Management (MPM) solutions, is debuting a set of capabilities in analytics, diagnostics, and vector monitoring to help monitor, explain, analyze, and improve trustworthy models. The company has also introduced a free 14-day trial and new pricing plans, making it easy for users to quickly realize the benefits of the Fiddler MPM platform and pay for only what they use.
Posted February 16, 2023
A short treatise on three mistakes organizations commonly make when designing or extending governance programs. Loosely inspired by discussions about (but not written by) ChatGPT. Decision rights—who needs to make what decisions—are the crux of governance. Success is not determined by the seniority of your governance council(s) or how many data stewards you have. Successful governance hinges on understanding how decisions are effectively made and made effective.
Posted February 16, 2023
Accenture announced it has acquired Morphus, a privately held Brazil-based cyber defense, risk management and cyber threat intelligence services provider, expanding its footprint in Brazil and Latin America. Financial terms were not disclosed. The acquisition expands Accenture's portfolio and marks the launch of a cyber industry practice in Latin America led by seasoned former CISOs from Morphus.
Posted February 14, 2023
Veza, the authorization platform for identity-first security, is launching an access permissions integration with GitHub to enhance security enterprise IP.
Posted February 14, 2023
Siren, provider of the Investigative Intelligence Platform, is announcing its recent strategic partnership with DarkOwl, a threat intelligence company specializing in dark web data.
Posted February 14, 2023
DBTA recently held a webinar, "Top Trends in Modern Data Architecture for 2023," to discuss the new technologies and approaches for cultivating an excelsior data architecture that holistically addresses the myriad of modern data architecture needs.
Posted February 13, 2023