Archive for June, 2007
Sunday, June 17th, 2007
Hedgehog: New Database Security Solution
This is a personal as well as a commercial posting for me… Tomorrow is a special day in the short history of my company - after long months of R&D, we are finally releasing our product, named Hedgehog (there’s already some coverage in Dark Reading). These are very exciting times both for me personally and [...]
3 Comments » - Posted in Oracle, monitoring, security by Slavik
Sunday, June 10th, 2007
Propagating Middle-Tier and Application Users to the DBMS (Part 2 of 3)
As promised, this is the second of a three part blog entry discussing the propagation of middle-tier users to the database. This post will mainly concentrate on the Java side of things. I will show how to use Spring-framework’s excellent transactional support using AOP to add an additional advice, relying on ThreadLocal to pass application [...]
6 Comments » - Posted in Oracle, Uncategorized, technical tips, user identity by Slavik
Friday, June 8th, 2007
Chronicle of a Breach Foretold
About a month ago I posted about breaches at educational institutions, and suggested that rectifying the problem could start by simply not hoarding PII (personally identifiable information) unnecessarily.
Today I read about this breach at Northwestern University (not the first data breach for them) where social security numbers of 4,000 individuals may have been compromised, including [...]