Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Rolling Review: Imperva's Secure Sphere: Page 3 of 6

After profiles are established, the fun starts. We created definitions for what constitutes database extrusion. Companies looking to address PCI compliance take note: Imperva provides several rulesets for detecting credit-card leakage, but they're overwhelming, with more than 200 unique rules for each major vendor. Moreover, all rules are enabled by default! We suspect many companies will simply leave all rules enabled and live with false positives. The problem, of course, is that after a while you'll stop paying attention.

Continue to the next page ...

READ MORE
>ABOUT THIS ROLLING REVIEW:
Database extrusion prevention products are being tested at our Real-World Labs® at the University of Florida. We're assessing ease of installation and configuration; breadth of database support; visibility into database activity--for example, network-based or local management on the database server; detection and notification and/or blocking of attacks; features; and price.

>NEXT UP:
Pyn Logic's Enzo Database Intrusion Prevention System

>OTHER VENDORS INVITED:
Application Security, Crossroads Systems, Guardium, IPLocks, Symantec, Tizor Systems and Transparency Software. Contact the author at [email protected] for consideration.

NWC's Rolling Reviews present a comprehensive look at a hot technology category, beginning with market analysis and wrapping up with a synopsis of our findings. See our kickoff to this database extrusion detection/prevention series at nwc.com/rollingreviews.