Web-based apps improve communication among companies, their employees, customers, and business partners, but they also introduce security and compliance concerns. When Imperva Inc.'s SecureSphere Database Security Gateway ships next week, it's expected to address both issues, offering monitoring and auditing capabilities of Oracle, IBM DB2, MS-SQL, Oracle, and Sybase databases.
FFF's Bob Coates has seen how Imperva's gateway guards against threats.
"This is unique, identifiable data subject to HIPAA requirements," says Bob Coates, VP of technology for FFF. One of Coates' primary concerns is unauthorized access to information by users or hackers. One way this could be done is through a "SQL Injection" attack that would trick the company's database into letting a hacker access as much of the company's data as they wanted.
Coates has seen how Imperva's gateway, with a starting price of $30,000, guards against internal threats. During tests, a developer accidentally tripped the gateway's alert mechanism while working on IG Treatment Tracker. "He wasn't doing anything wrong," Coates says. "But since he was accessing the database, the system put out an alert."