DBSS

Database Security Service (DBSS) is an intelligent database security service. Based on the big data analytics technologies, it can audit your databases, detect SQL injection attacks, and identify high-risk operations.

Supported Databases

Database audit provides the audit function in out-of-path mode for the following databases on the management console:

Relational Database Service (RDS)
Databases built on ECS
Databases built on BMS

Databases of some types and versions can be audited without using agents, as shown in Table 1.

Table 1 Agent-free relational databases
Type	Supported Edition
RDS for SQLServer	All editions are supported by default.
RDS for MySQL	5.6 (5.6.51.1 or later) 5.7 (5.7.29.2 or later) 8.0 (8.0.20.3 or later)
PostgreSQL NOTICE: If the size of an SQL statement exceeds 4 KB, the SQL statement will be truncated during auditing. As a result, the SQL statement is incomplete.	7.4 8.0, 8.1, 8.2, 8.3, 8.4 9.0, 9.1, 9.2, 9.3, 9.4, 9.5, 9.6 10.0, 10.1, 10.2, 10.3, 10.4, 10.5 11 12 13 14 15 16

Database audit supports the following database types and versions.

Table 2 Database types and versions supported by database audit
Database Type	Edition
MySQL	5.0, 5.1, 5.5, 5.6, 5.7 8.0 (8.0.11 and earlier)
Oracle (The Oracle database uses closed-source protocol and has complex adaptation versions. If you need to audit the Oracle database, contact customer service.)	11g 11.1.0.6.0, 11.2.0.1.0, 11.2.0.2.0, 11.2.0.3.0, and 11.2.0.4.0 12c 12.1.0.2.0, 12.2.0.1.0 19c
PostgreSQL	7.4 8.0, 8.1, 8.2, 8.3, 8.4 9.0, 9.1, 9.2, 9.3, 9.4, 9.5, 9.6 10.0, 10.1, 10.2, 10.3, 10.4, 10.5 11 12 13 14
SQL Server	2008 2012 2014 2016 2017
GaussDB(for MySQL)	8.0
DWS	1.5 8.1
DAMENG	DM8
KINGBASE	V8
SHENTONG	V7.0
HighGo	V6.0
GaussDB	1.3 Enterprise Edition 1.4 Enterprise Edition
Hbase	1.3.1 2.2.3
Hive	1.2.2 2.3.9 3.1.2 3.1.3

Service Features

Back up and restore database audit logs and meet the audit data retention requirements.
Monitor risks, sessions, session distribution, and SQL distribution in real time.
Report alarms for risky behaviors and attacks and responds to database attacks in real time.
Locate internal violations and improper operations and keep data assets secure.

Deployed in out-of-path pattern, database audit can perform flexible audit on the database without affecting user services.

Monitors database login, operation type (data definition, operation, and control), and operation object based on risky operations to effectively audit the database.
Analyzes risks, sessions, and SQL injection to help you master the database situation in a timely manner.
Provides a report template library to generate daily, weekly, or monthly audit reports according to your configurations. Sends real-time alarm notifications to help you obtain audit reports in a timely manner.

Следующая статья

Functions

Была ли эта статья полезна?

Поддержка Юридические документы