RE: IDS for DataBase Systems.

["Kohlenberg, Toby" <toby.kohlenberg () intel com>]

You'll likely here this from lots of people but that's a vulnerability
scanner, not an IDS. There are products that claim to do some sort of
firewalling or application-level monitoring for databases but I don't
know of any that actually offer IDS capabilities. Some of the 
application-level firewalls for web servers actually do block various
database insertion attacks and such. 

Please post anything you find to the list.

Thanks,
toby

> -----Original Message-----
> From: Galappatti, Kishantha [mailto:Kishantha.Galappatti () gs com]
> Sent: Thursday, November 14, 2002 6:24 AM
> To: 'Hemant Ramnani'; focus-ids () securityfocus com
> Cc: Hemant Ramnani
> Subject: RE: IDS for DataBase Systems.
>
>
> ISS has a product called Database Scanner
>
> -----Original Message-----
> From: Hemant Ramnani [mailto:ramnani () cs umn edu] 
> Sent: Wednesday, November 13, 2002 12:30 PM
> To: focus-ids () securityfocus com
> Cc: Hemant Ramnani
> Subject: IDS for DataBase Systems.
>
>
> Hello Everyone,
> I have seen a lot of papers, research work and commercial products for
> intrusion detection systems in networks. However I was 
> wondering if the same
> has been done for intrusion detection in DATABASE SYSTEMS in 
> particular,
> specially those dealing with using data mining techniques for 
> the same.
>
> Any help would be really appreciated.
>
> Thanks,
> Hemant.R
>
> Hemant Ramnani
> Masters student, Computer Science
> University Of Minnesota, Twin Cities
> Contact no: 612 379 2807 (R)
>           612 625 6597 (O)