<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Musings on Database Security &#187; monitoring</title>
	<atom:link href="http://www.slaviks-blog.com/category/monitoring/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.slaviks-blog.com</link>
	<description>Slavik&#039;s Blog</description>
	<lastBuildDate>Wed, 07 Dec 2011 17:07:31 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Java Forensics in Oracle</title>
		<link>http://www.slaviks-blog.com/2010/03/31/java-forensics-in-oracle/</link>
		<comments>http://www.slaviks-blog.com/2010/03/31/java-forensics-in-oracle/#comments</comments>
		<pubDate>Wed, 31 Mar 2010 22:44:00 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[monitoring]]></category>
		<category><![CDATA[Oracle]]></category>
		<category><![CDATA[patching]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[forensics]]></category>
		<category><![CDATA[virtual patching]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=257</guid>
		<description><![CDATA[Paul Wright published an interesting post about how you can find traces of Java privilege escalation attacks in the database. Great stuff! Of course, Hedgehog already protects against these published attacks as Paul showed earlier here. Hedgehog comes with build-in vPatch protections that cover the DBMS_JVM_EXP_PERMS and DBMS_JAVA attacks.]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2010/03/31/java-forensics-in-oracle/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Getting OS access using Oracle Database unprivileged user</title>
		<link>http://www.slaviks-blog.com/2009/04/22/getting-os-access-using-oracle-database-unprivileged-user/</link>
		<comments>http://www.slaviks-blog.com/2009/04/22/getting-os-access-using-oracle-database-unprivileged-user/#comments</comments>
		<pubDate>Wed, 22 Apr 2009 17:57:00 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[monitoring]]></category>
		<category><![CDATA[Oracle]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[sentrigo]]></category>
		<category><![CDATA[oracle_database_security]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=128</guid>
		<description><![CDATA[Recently, I read a very interesting paper by Alexandr Polyakov talking about how an unprivileged user can get OS access to the database machine by stealing NTLM challenge-response authentication strings. I really liked the way it was written and the fact that it uses automated metasploit plug-ins that will try to evade detection by using [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2009/04/22/getting-os-access-using-oracle-database-unprivileged-user/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Proactivity vs. Reactivity</title>
		<link>http://www.slaviks-blog.com/2008/03/17/proactivity-vs-reactivity/</link>
		<comments>http://www.slaviks-blog.com/2008/03/17/proactivity-vs-reactivity/#comments</comments>
		<pubDate>Mon, 17 Mar 2008 10:08:56 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[monitoring]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/2008/03/17/proactivity-vs-reactivity/</guid>
		<description><![CDATA[Fern Halper, an analyst with Hurwitz &#38; Associates wrote in her blog &#8220;Data makes the world go &#8217;round&#8221; about database activity monitoring (as well as highlighting some of what my company Sentrigo does). In the summary of her post she raises an important issue &#8211; that most DBAs are reactive rather than proactive when it [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2008/03/17/proactivity-vs-reactivity/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>DBAs are not the enemy, but they too need watching</title>
		<link>http://www.slaviks-blog.com/2007/07/05/dbas-are-not-the-enemy-but-they-too-need-watching/</link>
		<comments>http://www.slaviks-blog.com/2007/07/05/dbas-are-not-the-enemy-but-they-too-need-watching/#comments</comments>
		<pubDate>Thu, 05 Jul 2007 17:28:26 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[breach]]></category>
		<category><![CDATA[DBA]]></category>
		<category><![CDATA[insider threat]]></category>
		<category><![CDATA[monitoring]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[database security]]></category>
		<category><![CDATA[segregation_of_duties]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/2007/07/05/dbas-are-not-the-enemy-but-they-too-need-watching/</guid>
		<description><![CDATA[Back after a short and much needed hiatus, I came across this piece by security analyst Eric Ogren on Computerworld&#8217;s website. He discusses how DBAs have become public enemy number one because of compliance mandates to exercise segregation of duties, and how this has been blown out of proportion to other, greater risks. A few [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2007/07/05/dbas-are-not-the-enemy-but-they-too-need-watching/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Hedgehog: New Database Security Solution</title>
		<link>http://www.slaviks-blog.com/2007/06/17/hedgehog-new-database-security-solution/</link>
		<comments>http://www.slaviks-blog.com/2007/06/17/hedgehog-new-database-security-solution/#comments</comments>
		<pubDate>Sun, 17 Jun 2007 20:12:47 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[monitoring]]></category>
		<category><![CDATA[Oracle]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[database security]]></category>
		<category><![CDATA[database-monitoring]]></category>
		<category><![CDATA[hedgehog]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/2007/06/17/hedgehog-new-database-security-solution/</guid>
		<description><![CDATA[This is a personal as well as a commercial posting for me&#8230; Tomorrow is a special day in the short history of my company &#8211; after long months of R&#38;D, we are finally releasing our product, named Hedgehog (there&#8217;s already some coverage in Dark Reading). These are very exciting times both for me personally and [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2007/06/17/hedgehog-new-database-security-solution/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>So what really happened at TJX?</title>
		<link>http://www.slaviks-blog.com/2007/05/01/so-what-really-happened-at-tjx/</link>
		<comments>http://www.slaviks-blog.com/2007/05/01/so-what-really-happened-at-tjx/#comments</comments>
		<pubDate>Tue, 01 May 2007 12:15:22 +0000</pubDate>
		<dc:creator>Slavik</dc:creator>
				<category><![CDATA[breach]]></category>
		<category><![CDATA[credit cards]]></category>
		<category><![CDATA[encryption]]></category>
		<category><![CDATA[insider threat]]></category>
		<category><![CDATA[monitoring]]></category>
		<category><![CDATA[TJX]]></category>
		<category><![CDATA[database security]]></category>
		<category><![CDATA[intrusion]]></category>

		<guid isPermaLink="false">http://www.slaviks-blog.com/?p=3</guid>
		<description><![CDATA[What better way to start a blog about database security than to discuss what is possibly the biggest data breach ever? It now seems that several banks are suing TJX over claimed losses of tens of millions of dollars &#8211; so negligence in data protection carries a cash penalty, not just nebulous damage to reputation. [...]]]></description>
		<wfw:commentRss>http://www.slaviks-blog.com/2007/05/01/so-what-really-happened-at-tjx/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

<!-- Dynamic Page Served (once) in 0.263 seconds -->

