1. Understand the various methods of monitoring cloud databases with Guardium.
2. Learn how to get started with cloud database monitoring with examples using:
   1. Guardium Universal Connector
   2. Guardium External S-TAP

Can IBM Guardium protect the DB login to DB? What if someone is using strace/truss to attach to the DB login process? Just wondering how Guardium can protect the DB. When the attacker got the DB login password, can't the attacker dump the DB contents, save it to a USB device, and then take it away?

Hi Roger, Yes! Guardium can be leveraged to Protect Data Exfiltration and would be more effective/comprehensive if we do the below.

Firstly, End Point Protection should be in place to NOT allow untrusted devices USB devices. 

1. Protect the DB credentials in a Privilege Credential (PAM) Vault with Password rotation)
2. Enable Multi-factor when accessing highly sensitive DB credentials.
3. Integrate Guardium with a SIEM solution like QRadar to Alert suspicious DB activity like Data Extraction, Unusual User activity with UEBA
4. Automate incident response to isolate the Endpoint if it's a PC, block the IP from network. Detect and respond if USB device is installed/attached to a sensitive system.

Hope this helps with some insights.

Regards,

Rama Yenumula

Hello Tushar Agrawal,

Is there any  recorded session for this event that you  can share?

Thank you  in advance

Hi Cherbani Samir,

Sorry, this session was not recorded. However, we plan to host more such sessions.

Thanks