Duration
3 days
Overview
In this 3 day hands-on course, students will learn:
- How to initially configure SecureSphere for a Database Security deployment.
- How to run DB Data Classification Scans to find sensitive data.
- How to implement Database Security Policies and Database Auditing.
- How to configure DB Profiling.
- How to analyze Database Violations and Alerts.
- How to perform best practice tuning tasks.
- How to configure Active Blocking.
- How to configure Assessment Scans and manage risk scores.
- How to configure Database User Rights Management Scan and analyze the results.
- How to install and configure Agents.
Who Should Attend
This course is intended for database administrators, security administrators and security engineers who are responsible for securing and monitoring database applications.
Prerequisites
Before taking this course, you should have already completed SecureSphere System Administration training.
In addition, make sure you have the following skills:
- General understanding of application layer security concepts, application layer Web, and/or database protocols.
- Experience implementing or managing data center security or database applications
Lesson 1: Initial Database Security Configuration
- Verify existing Site objects, making any necessary corrections.
- Configure Database Connections on the Database Service.
- Create Stored Procedure Groups and apply them to their database applications.
- Add the protected DB server’s SSL key to the Database Service.
- Apply Data Masking to the Database Service.
- Enable and configure Personal Information Masking.
- Create SecureSphere Users and Roles.
- Create and apply a Sensitive Data Dictionary.
- Compare and contrast two different SecureSphere UI User Roles.
- View System Job progress.
Lesson 2: DB Data Classification Scans
- Define sensitive data.
- Identify SecureSphere’s predefined data types.
- Create Custom DB Data Types.
- Create Scan Profiles.
- Create and run DB Data Discovery Scans.
- Analyze DB Data Discovery Scan Results.
- Accept and Reject DB Discovery Scan Results.
- Review the effect of Accepting DB Discovery Scan Results.
Lesson 3: DB Security Policies
- Explain Predefined Policies and Default Policies.
- Summarize the each of the Default DB Security Policies applied to the SuperVeda Site.
- Explain performance differences between Signatures and Dictionaries.
- Add Followed Actions to SuperVeda’s Default DB Security Policies.
- Create Custom DB Security Policies.
- Create a DB Security Policy Configuration Report.
Lesson 4: DB Profiling
- Explain how SecureSphere’s Dynamic Profiling works.
- Explain the structure of Database Profiles and their place in the Sites Tree.
- Explain Profile Modes and Thresholds.
- Explain the components of DB Profiles.
- Explain the benefit of creating User Groups for profiles.
- Configure the SQL Profile Policy.
- Disable profiling for a specific database.
- Configure DB Profile Reports.
Lesson 5: Database Auditing
- Explain SecureSphere’s Database Auditing process.
- Explain the Fast Viewing process.
- Explain SecureSphere’s Audit Archiving and Purging process.
- Identify the data collected by the Default Rule – All Events Audit policy.
- Create Audit Policies.
- Explain how to share DB Audit Data information with SIEM systems.
- Explain how DB Audit Data Views help administrators analyze audit data.
- Create Reports directly from the DB Audit Data Views.
Lesson 6: DB Violations and Alerts
- Define Violations, Alerts, and Alert Aggregation.
- Explain the components of Violations and Alerts.
- Use SecureSphere’s Alert Flags to manage alerts.
- Use the Dashboard to quickly monitor SecureSphere’s current overall state.
- Configure and run Alert Reports to help analyze the Top Ten attacks against a protected application.
Lesson 7: Tuning
- Resolve Connected User and Hashed User when observed in the DB Audit Data.
- Configure SSL and Kerberos Keys.
- Tune Security Policies and Profiles.
- Tune Audit Policies.
- Configure Agent Exclude from Monitoring Rules.
- Become familiar with SecureSphere’s Audit Management Statistics.
Lesson 8: Active Blocking
- Review SecureSphere’s traffic blocking capabilities.
- Explain the Server Group Operation Modes.
- List and explain SecureSphere’s Blocking Followed Actions for Database Traffic.
- Explain the DB Agent’s Modes and how they relate to blocking DB traffic.
- Describe Imperva’s recommended practices to enable DB traffic blocking.
Lesson 9: Assessment Scans and Risk
- Describe the structure of DB Assessment Policies.
- Configure DB Assessment Scans that implement DB Assessment Policies.
- Review DB Assessment Scan results.
- Explain how SecureSphere evaluates Risk.
- Use SecureSphere’s Risk Explorer View to analyze exposure to Risk.
- Create DB Assessment Scan Result Reports.
Lesson 10: Database User Rights Management
- Configure and run DB User Rights Scans.
- Analyze the Effective Permissions found by the DB User Rights Scan.
- Manage Role and Permission Grants.
- Create a DB User Rights Report that informs the DBA team which permissions should be corrected.
Programme scope, delivery arrangements and suitability are confirmed during enquiry.