Latest releases track end-user activity through pooled connections to databases within leading applications to enforce security policies and meet audit requirements

October 21, 2009

3 Min Read


SAN MATEO, Calif.—October 21, 2009—Sentrigo,Inc., the innovator in database security software, today announced the release of Hedgehog IDentifier versions 3.0 for .NET and 2.5 for J2EE. The latest IDentifier updates extend previous support for J2EE-based applications to multiple application environments including Microsoft .NET application servers, Microsoft SQL Server Reporting Services, Oracle applications such as Oracle E-Business Suite, PeopleSoft, Siebel and other applications developed using the Oracle Forms platform. When deployed in conjunction with Hedgehog Enterprise, Hedgehog IDentifier solves a problem most enterprises face when trying to audit user activity across enterprise applications " information concerning end-user identity is often lost by the time a transaction reaches the databases, making it impossible to hold users accountable for their transactions. This critical capability allows enforcement of security policies to comply with regulations such as Sarbanes-Oxley, SAS-70 and HIPAA that mandate full accountability and closed-loop audit trail from the end-user to the database.

Hedgehog IDentifier is a unique solution that tracks and audits individual user activity when running applications that access the database on behalf of multiple users. These 'pooled connections' are common in ERP, financial services, manufacturing, HR and other back office environments, and obscure individual user accountability making it difficult to certify compliance with information security policies. Unlike other methods that use statistical correlation and are not reliable, Hedgehog Identifier is a software component installed on the application servers, and appends the application end-user credentials to every transaction hitting the database. Using the Hedgehog Enterprise rules engine, it can issue alerts and limit access to database objects based on pre-determined parameters, for example only allowing certain named users, from specific systems, to see sensitive records.

To satisfy auditor requirements, organizations have often resorted to modifying applications to access the database directly on each user's behalf. However, even when possible, this can take months to complete and test " and often is not even feasible when utilizing third party applications. Hedgehog Identifier does not require any change to the underlying applications or DBMS, and therefore speeds deployment and saves significant development costs. Most importantly, it can provide a complete audit trail of exactly who accessed what data and when, as required by security policies.

Nathan Shuchami, Sentrigo's chief executive officer commented: "Most enterprises have pooled connection environments in some of their critical business applications, and these pose a distinct challenge to auditors as they need to certify compliance with internal policies and industry regulations. Hedgehog Identifier ties database actions with the end-users who initiate them, enabling the enforcement of security policy on individuals and satisfying regulatory compliance requirements. These new releases support most of the popular development environments to meet audit requirements quickly and inexpensively."

About Sentrigo Sentrigo, Inc. is a recognized innovator in database security. The company's Hedgehog software provides full-visibility database activity monitoring and real-time protection and has been rapidly adopted by Global 2000 companies to defend mission-critical data against insider misuse as well as outsider intrusion. Enterprises across industry sectors are also using Sentrigo Hedgehog to accelerate compliance with regulatory requirements such as PCI DSS, Sarbanes-Oxley and HIPAA. Sentrigo has won wide acclaim for its industry and technology leadership by publications such as Network World and SC Magazine. For additional information and to download Hedgehog, visit

Sentrigo, Sentrigo Hedgehog, Hedgehog Identifier, Hedgehog vPatch and the Sentrigo logo are trademarks of Sentrigo, Inc. All other trademarks are the property of their respective holders.

# # #

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like

More Insights