DataBase Services
atreya Limited offers a complete Database Security Assessment Service (DSAS) to businesses that rely on the security of the information held within their databases or have concerns relating to the security compliance of these databases.
DataBase Security Reviews
The security efforts of many organisations are frequently focused on host based security measures often overlooking the security of the database. The information contained within these databases is not only critical from a confidentiality, integrity and availability perspective but is essential to the company's ability to operate as a going concern and requires specialist knowledge to identify the risks associated with a data breach. Recent years has seen a marked increase in the number of reported cases of data repositories being targeted or, in the worst case scenario, compromised. Contrary to popular belief it is not always the value of the compromised data that is the primary consideration indeed in many cases it has been the damage to the reputation of the company that has caused the greatest embarrassment and proven the most difficult to re-establish.
The DSAS service delivers a documented, comprehensive and in-depth analysis of the current security posture of existing relational databases. The report not only contains technical recommendations that can be action by database administrators but provides the primary audience of Security Managers, Auditors, Compliance Officers and members of the senior management team with sufficient information to make informed decisions that will improve the security of existing databases. In turn this will assist in ensuring that security budget is spent wisely and efficiently.
DataBase Security Assessment
The OWASP Top 10 is a strong starting point for web application testing, but organizations should really look to go beyond this. The underlying application logic needs to be tested. Websites need to be assessed with different classes of users, to ensure that appropriate partitioning and access controls exist. Content Management Systems (CMS) and administrative functions should be assessed and a series of broader controls should be reviewed and tested.
Application Testing Experience
Aatreya has tested a vast range of applications, from internal applications to external applications delivered over the internet and by mobile/cell phone.
Some of the applications Aatreya has tested include
- Mail applications (Exchange, Domino, Groupwise, Bespoke)
- CRM applications
- Databases (Sybase, DB2, Oracle, Postgres, MySQL, Microsoft SQL)
- ERP applications (Peoplesoft, Oracle, SAP)
- Financials (Oracle, Sage)
- Operating systems (Windows, Linux, Solaris, AIX, OS400, Novell, Apple, Mainframe derivatives)
- IP Telephony (Cisco, Mitel, Alcatel, Nortel, BT, Avaya, SIP based services)
- Numerous custom applications in banking, insurance, retail and manufacturing sectors
- Web applications and web services
- Mobile telephony applications
Features Of Our DataBase Security Testing
- Customer driven
- CRM applications
- Assists in understanding how security measures compare to standards and compliance e.g. PCI, SOX
- Enables more informed decisions to be made when managing the company's exposure to threats
- Provides recommendations for reducing exposure to currently identified security risks
- Business and technically focussed report
- Provides demonstrable segregation of duties
- Assessments have a named consultant appointed for the duration of the assignment
- Follows proven best practices
- Can be performed without the need for consultants to be onsite
- No requirement for remote access
- Can be performed on a production database during normal operation
- Non-intrusive processing
- Tamper detection
Copyright (c) 2016 aatreya technologies. All rights reserved.