Dynamic Profiling
Automated Usage Modeling
SecureSphere's Dynamic Profiling technology automatically examines live application and database traffic to create a comprehensive profile of the structure and dynamics of that application and database. Valid application and database changes are automatically recognized and incorporated into the profile over time, ensuring that SecureSphere detects potentially malicious exceptional activity.
SecureSphere Web Application Firewalls, Database Monitoring Gateways and Database Security Gateways each employ Dynamic Profiling to create a model of legitimate user behaviors. By comparing profiled elements to actual traffic, SecureSphere is able to detect malicious activity and usage policy exceptions of any kind.
Operational Efficiency
Dynamic Profiling overcomes the biggest drawback of other application and database security and compliance solutions – manual creation and maintenance of audit controls and security policies. Application and database control requires an understanding of hundreds of thousands of constantly changing variables including URLs, parameters, cookies, queries, commands, and stored procedures. Dynamic Profiling delivers completely automated data audit and security with no need for manual configuration or tuning. If desired, administrators can always manually modify the profiles to bridge any differences between actual usage and corporate security policies. . Dynamic Profiling enables SecureSphere to begin protecting your applications and data immediately.
Custom Policy Definition
In addition to the automated policy definition provided by Dynamic Profiling, SecureSphere allows security administrators to define policies regarding specific attributes of application or database traffic. Custom security policy rules are manually configured and provide the power to perform operations that are not available or convenient to implement via profile and protocol violation rules.
SecureSphere’s Dynamic Profiling technology allows for fast deployment, intelligent activity tracking, and efficient operation of database and application security solutions.