BizAnalyst Network

Internal Threat from Database Admins

Crushing the Internal Threat from Database Admins

Database admins are very close to an organization's greatest asset, but needn't have the ability to abuse that knowledge, says Ted Julian of Application Security Inc. 
 

Outside hackers steal data to make money, and so do internal folks, says Ted Julian, vice president of marketing for Application Security Inc. Protecting against the threats from database admins, who often can see plenty of data that they don't need to see within the apps they work with, involves rules-based alerting and cross-checking with database-specific known vulnerabilities in the best cases. PCI compliance and other regulatory pressures are prompting companies to do database cleanups that include everything from finally getting rid of default passwords to expanding the separation of roles for admins such that there can be no hint of improper access. 

full article