Database Monitoring?

[Paul Lepkowski <peliso () RIT EDU>]

We're wondering what universities do for database monitoring regarding security and auditing aspects?

If you use specific tools:

-          What tools are used and have you found them useful?

-          Are they commercial, open source, or custom?

-          What level of monitoring takes place (transaction, table, field)?

-          What events are logged and who monitors them (i.e. DBA's, security, etc.)?

Thanks,
Paul

Paul Lepkowski, CISSP, GIAC-GPEN
RIT Information Security Office
Enterprise Information Security Lead Engineer
Staff Council Representative

Rochester Institute of Technology
Ross 10-A200
151 Lomb Memorial Drive
Rochester, NY 14623
(585) 475-6972
paul.lepkowski () rit edu<mailto:paul.lepkowski () rit edu>

CONFIDENTIALITY NOTE: The information transmitted, including attachments, is intended only for the person(s) or entity 
to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, 
dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other 
than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any 
copies of this information.