dbsec-k8凯发游戏

data security products

prevent the data breach caused by external attack, manage and control the security of internal sensitive data, and meet the requirement of data security

dbsec database audit system (das)

dbsec database audit system (das) is a database security audit system based on database communication protocol analysis and sql statement analysis technologies, featuring comprehensive and efficient database monitor, alarm and tracing capability. based on the behavior analysis, das describes databases risks and attack behaviors efficiently by its powerful risk behavior description language, sends alarm for access behaviors that violated security policies to keep database compliance, achieves database risk inspection and alarming rapidly through its built-in database risk feature library.

dbsec dynamic data masking system

dbsec dynamic data masking product provides dynamic mask capability with high reliability. deployed in series, it masks sensitive data in real time through addressing the database communication protocol according to user roles and rules. in the scenario of real-time access to the production data, it masks the sensitive data according to the privileges of users, and returns different results for different users.

dbsec database protection system (dps)

dbsec database protection system (dps) is base on the network and database protocol analysis and control technologies. it can control the permission of database accessor, block malicious and dangerous operation through its auto-protect mechanism. dps analyzes the sql protocol, then discharges the legal sql operation if it is on the white list and block the suspicious illegal operation if it is on the black list, this mechanism is an external defense circle who truly reflect the active prevention and real-time audit of sql risk operations. dps is mainly used for external instrument behaviors, provides functions of sql injection prevention and database virtual patch. through the virtual patch, database system complete its vulnerability protection without a upgrading and patching vulnerability.

dbsec database encryption system (des)

dbsec database encryption system (des) is a database security product based on transperant database communication encryption technology, provides multiple functions such as sensitive data encrypted storage, access control consolidation, application access security control, users commutative monitoring, etc.based on two core mechanisms, the encryption storage mechanism on the bottom layer and the independent privileges control mechanism, des prevents the data breaches result by plaintext storage, the external intrusion for the purpose of stealing sensitive data, the data abuse of internal high privilege users, the direct data decryption through bypass the legal application system, and solves data breaches problems at “the last kilometer”.des provides various encryption methods, such as column encryption, table encryption, table space encryption for different use scenarios and security requirements. combined with the patented core technologies, such as transparent encryption and decryption, ciphertext indexing and so on, des features excellent adaptation and practicability, and achieves the high security of data, the complete trasperant of application, and high-efficiency access of encryption.

dbsec database operations management system (doms)

dbsec database operations management system (doms) provides database operation behaviors processing management, provides functions for database operation behaviors, such as before-event approval, in-event control, after-event audit, regularly report, etc., combines approval, control and tracing efficiently, prevents the malicious operation and misoperation behaviors of internal maintenance and operation personnels, ensures the high-efficient approval and correctly execution.

doms significantly improves the fineness and security of daily operation management work.

data security management tool

understand the status of data security, clarify the status of data assets, and ensure the security of data outgoing and sharing

dbsec database security assessment system（dsas）

dbsec database security assessment system (dsas) provides customers with security inspection solutions for both international and domestic mainstream databases. dsas discovers weak security configuration, risky code and weak password in their databases, analyzes and osmotically simulated attacks the known vulnerability. it exposes the security problems of current database system efficiently, and monitors the security status of databases persistently. dsas provides database security assessment reports and databases security hardening advices for customers after the inspection, which imporves database security significantly.

dbsec data asset carding system (dacs)

dbsec data asset carding system (dacs) is a database security product helps customers make clear sensitive data distribution and sensitive data use status by scanning and sniffing, traffic and log analysis, and sensitive data grading and classification.

dacs helps customers with database discovery and sensitive data discovery in their network, and classifies their data assets according to its type and security classification, to achieve a differential and targeted protection to sensitive data.

static carding: dacs locates databases in current network environment. dacs searches database in its networks regularly to provides accurate basis for database security management.

dynamic carding: dacs provides the access popularity of database, monitors automatically the sensitive data use status on application side and operationg and maintenance side, discovers data abuse, and provides basis for core data security management and control.

dacs also provides carding capability for data privilege. the security personnels will find the information of all users and their related priviliges in database from the carding result, and adjusts potential risk configuration, such as improper privileges and zombie accounts, and meets minimum authorization principle better requests by information security policies.

dbsec static data masking system

dbsec data masking system (dms) is a professional data masking product of extracting, blanching, and dynamically masking the data in production environment.

dms meets the masking requirement from various scenario: test, development, training, data analysis and data sharing.

dms compliance with the requirements in finance industry, insurance industry, energy industry, government industry, healthcare industry, education industry, etc.

dbsec data watermarking system (dws)

dbsec data watermarking system (dws) is a product that embed the watermark into the original data to realize the traceability after data distribution, featuring high degree of concealing, usability and management integration. dws solves the trace problem of data breaches, increases the security and traceability of data transmission.