|
|
|
Date Submitted:
06/21/05
Hits: 45 Rating:  based on 0 votes
Security Auditing In Microsoft SQL ServerAdded by Papergrl
Description:
How do we properly audit activity in a database? Native auditing fails here because it is fully under the control of the DBA. He or she can easily turn off auditing, clear the audit logs, manipulate an audit record, or even reconfigure auditing to filter out their own malicious activity. Auditing should ultimately provide a separation of duties. An ideal audit system would be intelligent enough to distinguish database administrative accounts, filter out noise and irrelevant events, and succinctly illustrate their activities. Auditing data should be written to a secure location, where even an administrator of the database would not have direct control over the recorded activity.
Read the Complete Paper You don't have permission to post replies. Please login or register. |