Post on 31-Mar-2018
transcript
1
DATA SHEET
Imperva SecureSphere Discovery and Assessment
SecureSphere Discovery and Assessment
pinpoints sensitive data
databases
Uncover hidden risks and protect data
An essential step in protecting data is uncovering blind spots such as rogue or vulnerable databases. These blind spots create security risks as attackers can exploit
Discovery and Assessment helps organizations reduce the risk of data breach by locating sensitive data and identifying database vulnerabilities.
SecureSphere Discovery and Assessment provides an automated and reliable way to
security and compliance projects and reduce the resource impact of these projects.
Imperva SecureSphere Database Discovery and Assessment
Discover databases
Classifysensitive data
Detectvulnerabilities
Remediateand report
2
DATA SHEET
Vulnerability Assessment—Detect Exposed Databases
SecureSphere Discovery and Assessment streamlines vulnerability assessment at the data layer. It provides a comprehensive list of over 1500 tests and assessment policies for scanning platform, software, and configuration vulnerabilities. Database assessments leverage Common Vulnerabilities Scoring System (CVSS) and the latest research from the Imperva Defense Center to assess database servers and assign a vulnerability severity level. Assessment scans can be run on-demand or at scheduled intervals, giving security teams the flexibility to scan when it least impacts IT operations. Assessment policies are available for a broad range of databases including Oracle, Microsoft SQL, IBM DB2 and more. The vulnerability assessment process, which can be fully customized, uses industry best practices such as DISA STIG and CIS benchmarks.
Reporting and Dashboard—Gain Visibility into Security Posture
SecureSphere Discovery and Assessment produces detailed reports that help provide an understanding of an organization’s overall security posture. In addition to graphical dashboards, it includes pre-defined assessment test reports as well as the ability to create custom reports. Assessment test reports also provide concrete recommendations to mitigate identified vulnerabilities and strengthen the security posture of a data repository.
Pre-defined Assessment Policies—Automate Compliance
SecureSphere Discovery and Assessment includes pre-defined assessment policies that simplify compliance with regulatory mandates such as Payment Card Industry Data Security Standard (PCI DSS) and Health Insurance Portability and Accountability Act (HIPAA). These pre-defined assessment policies simplify compliance audits across increasingly complex data environments.
Risk-based Remediation—Prioritize and Track Vulnerabilities
SecureSphere Discovery and Assessment enables risk-based vulnerability management with the Imperva RiskSense Vulnerability Manager add-on option. Imperva RiskSense Vulnerability Manager generates a risk score by augmenting the vulnerability severity level with contextual information such as business criticality of the database. The risk
Discovery and Assessment Benefits• Uncover new, forgotten or rogue
databases• Discover where sensitive data
is stored across your database infrastructure
• Detect database vulnerabilities based on the latest research from the Imperva Defense Center
• Automate database discovery, sensitive data classification and database vulnerability assessment
• Audit database configurations and measure compliance with industry standards
• Streamline regulatory compliance with PCI DSS and HIPAA
Summary view of assessment test results
33
DATA SHEET
imperva.com
Imperva SecureSphere Cyber SecurityImperva SecureSphere is a comprehensive, integrated security platform that includes SecureSphere Web, Database and File Security. It scales to meet the app and data security demands of the largest organizations, and is backed by the Imperva Defense Center, a world-class security research organization that maintains the product’s cutting-edge protection against evolving threats.
score helps organizations prioritize remediation efforts that represent the greatest risk. Imperva RiskSense Vulnerability Manager also facilitates remediation with a built-in
User Rights Management—Find Excessive Rights
SecureSphere Discovery and Assessment enables automatic aggregation and review of user rights with the User Rights Management for databases (URMD) add-on option.
of excessive rights and dormant accounts based on organizational context, object sensitivity and actual usage. Using URMD organizations can demonstrate compliance with regulations such as SOX, PCI DSS 7, and PCI DSS 8.1.4 and reduce the risk of a data breach.
Database Auditing and Protection—The Next Step for Data Security
For complete visibility and control of user access to sensitive data, SecureSphere Discovery and Assessment can be extended to include database activity monitoring
organizations can implement security policies to block or alert on attempts to exploit a vulnerability, providing virtual patch protection while software patches are developed by software vendors.
© 2017, Imperva, Inc. All rights reserved. Imperva, the Imperva logo, SecureSphere, Incapsula, Skyfence, CounterBreach, ThreatRadar, and Camouflage and design are trademarks of Imperva, Inc. and its subsidiaries. All other brand or product names are trademarks or registered trademarks of their respective holders.