Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Analytics

A New Approach to Database Security

Startup Sentrigo prepares to launch Hedgehog, a new tool that works at the cache memory level

Startup vendor Sentrigo Monday will unveil a new database security tool that can detect unauthorized changes by hackers or insiders -- without hogging all of your database server cycles.

The product rollout will be the first to come out of Sentrigo, a venture-backed company that received $3.5 million in first-round funding last month. At that time, the company would only give a general description of its technology, without product names or technical specifics. (See Sentrigo Gets Funding.)

In an interview yesterday, however, Sentrigo officials revealed the first details of Hedgehog, a new tool that can detect database intrusions at a granular level and shut them down in real time.

"We have what we feel is a revolutionary approach to database security," says Nathan Shuchami, CEO of Sentrigo. "It's a completely different way of addressing the problem."

Hedgehog is a software-only monitoring tool that attaches sensors to the cache memory of a database machine, Shuchami explains. It can detect any access by outsiders or insiders, and it can track the specific changes made at the object level, he says.

Most third-party database security tools, such as Guardium and Imperva, are designed to stop outsiders from hacking in, usually through a network appliance. But Shuchami observes that such appliances may not stop tampering by authorized insiders, such as database administrators, who can access the database server directly, without going through the network.

Database vendors such as Oracle also offer their own security tools, but they are generally designed to do security audits and not real-time monitoring or intrusion prevention, Shuchami says. "Oracle Audit is problematic because it requires a lot of processor power," he notes. "It can cause the organization to double its CPU requirement for a database."

By attaching sensors to the database's cache memory, Hedgehog can detect any changes to the database, whether they are made by hackers or authorized insiders, Shuchami explains. The sensors work at the hardware level, which means they aren't dependent on the network and they don't put extra stress on the database server itself.

Eric Ogren, principal analyst with the Ogren Group, says the new technology is different from what the market has seen so far. "Hedgehog's unique approach makes the product a compelling option for organizations looking to intensify their focus on database protection."

Several early customers offered testimonials for the product, including the Bank of Israel and Bun-Gurion University, one of Israel's largest educational institutions with more than 17,000 students.

"Hedgehog allows us to defend our database from prying eyes, without the need for expensive new hardware or changes to our infrastructure," says Eran Lachs, systems section manager at Ben-Gurion.

In the next two weeks, Sentrigo will launch a free trial of the software, which will remain free for small and medium-sized businesses, Shuchami says. Larger enterprises will be able to try out the software for free, and if they choose to deploy it, they will pay a one-time fee of $2,000 per CPU. Subscription services will also be offered for security updates.

— Tim Wilson, Site Editor, Dark Reading

  • Guardium Inc.
  • Imperva Inc.
  • Sentrigo Inc. Tim Wilson is Editor in Chief and co-founder of Dark Reading.com, UBM Tech's online community for information security professionals. He is responsible for managing the site, assigning and editing content, and writing breaking news stories. Wilson has been recognized as one ... View Full Bio

    Comment  | 
    Print  | 
    More Insights
  • Comments
    Newest First  |  Oldest First  |  Threaded View
    Where Businesses Waste Endpoint Security Budgets
    Kelly Sheridan, Staff Editor, Dark Reading,  7/15/2019
    US Mayors Commit to Just Saying No to Ransomware
    Robert Lemos, Contributing Writer,  7/16/2019
    Register for Dark Reading Newsletters
    White Papers
    Video
    Cartoon Contest
    Current Issue
    Building and Managing an IT Security Operations Program
    As cyber threats grow, many organizations are building security operations centers (SOCs) to improve their defenses. In this Tech Digest you will learn tips on how to get the most out of a SOC in your organization - and what to do if you can't afford to build one.
    Flash Poll
    The State of IT Operations and Cybersecurity Operations
    The State of IT Operations and Cybersecurity Operations
    Your enterprise's cyber risk may depend upon the relationship between the IT team and the security team. Heres some insight on what's working and what isn't in the data center.
    Twitter Feed
    Dark Reading - Bug Report
    Bug Report
    Enterprise Vulnerabilities
    From DHS/US-CERT's National Vulnerability Database
    CVE-2019-14230
    PUBLISHED: 2019-07-21
    An issue was discovered in the Viral Quiz Maker - OnionBuzz plugin before 1.2.7 for WordPress. One could exploit the id parameter in the set_count ajax nopriv handler due to there being no sanitization prior to use in a SQL query in saveQuestionVote. This allows an unauthenticated/unprivileged user ...
    CVE-2019-14231
    PUBLISHED: 2019-07-21
    An issue was discovered in the Viral Quiz Maker - OnionBuzz plugin before 1.2.2 for WordPress. One could exploit the points parameter in the ob_get_results ajax nopriv handler due to there being no sanitization prior to use in a SQL query in getResultByPointsTrivia. This allows an unauthenticated/un...
    CVE-2019-14207
    PUBLISHED: 2019-07-21
    An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling the clone function due to an endless loop resulting from confusing relationships between a child and parent object (caused by an append error).
    CVE-2019-14208
    PUBLISHED: 2019-07-21
    An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a NULL pointer dereference and crash when getting a PDF object from a document, or parsing a certain portfolio that contains a null dictionary.
    CVE-2019-14209
    PUBLISHED: 2019-07-21
    An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to Heap Corruption due to data desynchrony when adding AcroForm.