InfoSphere Guardium Vulnerability Assessment

Assess database infrastructure vulnerabilities and take remedial actions

IBM® InfoSphere® Guardium® Vulnerability Assessment scans database infrastructures to detect vulnerabilities, and suggests remedial actions. This software checks for exposures such as missing patches and misconfigured privileges. It also identifies vulnerabilities based on how data is being accessed and manipulated by monitoring all data traffic in near real time.

InfoSphere Guardium Vulnerability Assessment helps you eliminate the risks created by insecure configurations, weak passwords and other vulnerabilities.

Automated vulnerability, configuration and behavioral assessment—scans your entire database infrastructure for vulnerabilities.
Reporting and action plans—evaluate and document your database security to help you assess, escalate and resolve risks.

Automated vulnerability, configuration and behavioral assessment

Includes preconfigured vulnerability tests, encompassing Center for Internet Security (CIS) and Security Technical Implementation Guide (STIG) best practices, updated regularly through the IBM InfoSphere Guardium Knowledge Base service.
Provides platform-specific static tests that detect insecure configurations for the specific database being assessed.
Conducts dynamic tests that uncover behavioral vulnerabilities such as account sharing, excessive login failures and unusual after-hours activity.
Does not rely on intrusive exploits or tests that can impact system availability, and provides external reference information such as common vulnerabilities and exposures (CVE) identifiers.
Supports leading database platforms and all major operating systems, including big data environments.

Reporting and action plans

Produces detailed reports and supporting data.
Provides a summary security evaluation, which includes weighted metrics and recommended remedial action plans to strengthen security.
Integrates with IBM InfoSphere Advanced Compliance Workflow Automation to automatically schedule assessments and manage report distribution, sign-offs and escalations.