IBM Security Guardium

 View Only

  • 1.  Redaction issue for MS SQL Database

    Posted Wed April 01, 2020 04:47 AM
    hi all,

    I  want to do redaction for some data in MS-SQL server but it is not working fine. Is there any possibility to add column name and table name in Guardium Extrusion policy?

    Thanks,
    Phanendra Rao.C

    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------


  • 2.  RE: Redaction issue for MS SQL Database

    Posted Thu April 02, 2020 09:18 AM

    Hey there

    This feature works based on a regular expression to match, and you can replace with an arbitrary character. If you need to do something based on field and table name, there is another functionality that may work for you.

    This functionality is called Query Rewrite (https://www.ibm.com/support/knowledgecenter/SSMPHH_11.1.0/com.ibm.guardium.doc/protect/query_rewrite.html). It allows to transform a query and replace fields or SQL verbs, then you can do something like . MSSQL is supported.

    Take a look here :
    https://www.youtube.com/watch?v=3YMxGmFCqzk

    Regards,



    ------------------------------
    Gonzalo Andres Lorca Cid
    ------------------------------

    Original Message


  • 3.  RE: Redaction issue for MS SQL Database

    Posted Sun April 05, 2020 04:45 AM
    hi,

    Thank you so much. Do we get any videos for IBM guardium like Jose Bravo for Qradar SIEM?

    Thanks,
    Phanendra Rao.C

    ------------------------------
    PHANENDRA RAO CHAVANA
    ------------------------------

    Original Message


  • 4.  RE: Redaction issue for MS SQL Database

    Posted Mon April 06, 2020 05:51 AM
    Hi Phanendra,

    There are a lot of videos as well as other resources available within the IBM Security Learning  Academy, the majority of which are free: https://www.securitylearningacademy.com/local/navigator/index.php?level=dsds01

    I hope that some of these are useful to you.

    It is frequently being updated so please keep referring back to it if you need to learn more about Guardium.

    Best regards

    Chris

    ------------------------------
    Chris Beaney
    Data Security Support Manager - Europe, Middle East & Africa
    IBM
    ------------------------------

    Original Message


  • 5.  RE: Redaction issue for MS SQL Database

    Posted Mon April 06, 2020 02:36 AM

    Redaction - all extruded values from identified by extrusion session are analyzed on STAP level

    It is a reason why SQL analysis is not available. Please imagine system overload with thousands of sessions and necessity to manage full session stack on monitored machine to correlate SQL and its results.

    QRW - mentioned by Gonzalo allows us to analyze referred objects and redact output BUT:

    I do not see a reason to redact data for non-application sessions. In most cases much more suitable is blocking functionality. If identified user is not authorized to get access to sensitive object we should block this access. If some data from sensitive table should be accessible I suggest create view to provide this access.



    ------------------------------
    Zbigniew (Zibi) Szmigiero
    IBM
    Warsaw
    ------------------------------

    Original Message