DataSunrise Overview
DataSunrise is an advanced database security and compliance solution designed to protect sensitive data across a wide range of databases, cloud storage systems, and other data repositories. Here’s a detailed look at what DataSunrise does and its key features.
Primary Functionality
DataSunrise is engineered to secure databases and data in real-time, ensuring comprehensive protection against both external and internal threats. It supports all major SQL and NoSQL databases, data warehouses, and data lakes, including but not limited to Amazon RDS, Amazon Aurora, DynamoDB, Redshift, Athena, Elasticsearch, S3, as well as other databases like SAP HANA, Oracle, Cassandra, MongoDB, and more.
Key Features
Database Activity Monitoring (DAM)
DataSunrise includes robust DAM capabilities that monitor and log all database events. This feature is crucial for auditing, compliance, and detecting potential security breaches. The system can operate in two primary modes:
- Sniffer Mode: Acts as a traffic analyzer, logging all database events without interfering with database traffic.
- Proxy Mode: Functions as a proxy server, controlling incoming queries and database responses, allowing it to block or modify queries if necessary.
Data Masking
DataSunrise offers both dynamic and static data masking. This feature enables organizations to protect sensitive data such as Personally Identifiable Information (PII), Protected Health Information (PHI), and Payment Card Industry (PCI) data by masking or replacing it with fake values or random characters.
Compliance Automation
The solution automates compliance with various regulatory standards including SOX, HIPAA, ISO27001, PCI, and GDPR. It ensures that organizations maintain the required level of data security and auditing, even when transitioning their database workloads to managed services.
Vulnerability Assessment
DataSunrise includes tools for vulnerability assessment to identify and mitigate potential security risks within the database environment. This helps in maintaining the integrity and security of the data.
Sensitive Data Discovery
The system can discover sensitive data within the databases, which is essential for data protection and compliance. This feature helps in identifying where sensitive data is stored and ensuring it is properly secured.
Data Audit
DataSunrise features a self-learning algorithm integrated into its Data Audit component. This component collects information on all user actions and modifications to database contents, aiding in data breach investigations and vulnerability assessments. The system learns typical database user behavior to create a whitelist of authorized SQL queries.
Data Security
The Data Security component prevents unauthorized access and defends against SQL injections and other malicious activities. It operates based on a system of security policies defined by the firewall administrator, who can specify which queries should be treated as malicious and block them accordingly.
High Availability and Scalability
DataSunrise supports high availability, autoscaling, and failover for AWS environments. All instances can be monitored and configured from a single console, ensuring seamless management and minimal downtime.
Integration and Authentication
The solution integrates with various AWS services such as CloudWatch, IAM, and SIEM, and supports authentication via Active Directory and LDAP. This ensures robust security and ease of integration into existing infrastructure.
Deployment and User Experience
DataSunrise offers flexible deployment options, compatible with 64-bit Windows and Linux operating systems. It can be installed on the database server, on a separate server in the cloud, or on-premises. The intuitive interface and easy deployment process make it user-friendly, even for complex database environments.
Reporting and Monitoring
The Web Console features an Event Monitor section that provides detailed information on system events, intercepted queries, and firewall actions. Additionally, DataSunrise includes an advanced reporting tool called Report Generator, which allows administrators to create custom reports and save them as PDF or CSV files.
In summary, DataSunrise is a comprehensive database security solution that offers real-time protection, compliance automation, and advanced auditing capabilities, making it an essential tool for organizations seeking to safeguard their sensitive data.